# Services and their accounts

**URL:** <https://forums.speedlife.net/t/services-and-their-accounts/55640>\
**Category:** NYSpeed Off Topic\
**Created:** [September 29, 2008, 6:59am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640 "2008-09-29T06:59:48Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Daddie](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/daddie/32/7621_2.png) [@Daddie](https://forums.speedlife.net/u/Daddie)\
**Post date:** [September 29, 2008, 6:59am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/1 "2008-09-29T06:59:48Z")

</div>

I need a program to poll all the servers within a specific IP range of their services and which account they login with.

Anyone know?

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 29, 2008, 7:06am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/2 "2008-09-29T07:06:58Z")

</div>

Determine what account the service is running as?

[http://www.foundstone.com/us/resources/proddesc/superscan.htm](http://www.foundstone.com/us/resources/proddesc/superscan.htm)

I think that lets you enumerate/dig info out of windows services…

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [September 29, 2008, 7:39am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/3 "2008-09-29T07:39:43Z")

</div>

NMAP can scan an IP range and tell you whats running on each port and even identify the service

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 29, 2008, 7:40am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/4 "2008-09-29T07:40:30Z")

</div>

I was going to suggest nmap…but then he added something about accounts…

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [September 29, 2008, 7:53am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/5 "2008-09-29T07:53:25Z")

</div>

Not sure if there was a program that did them both but I use nmap daily for service discovery.

Kinda interested in the results of this question too.

---

<div class="post-metadata">

**Author:** ![Daddie](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/daddie/32/7621_2.png) [@Daddie](https://forums.speedlife.net/u/Daddie)\
**Post date:** [September 29, 2008, 8:05am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/6 "2008-09-29T08:05:32Z")

</div>

NMAP won’t work - I need the accounts that the services run with.

Keep em coming, I don’t know if that superscan will work, I can try it though

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [September 29, 2008, 8:38am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/7 "2008-09-29T08:38:07Z")

</div>

i would be shocked if you can scan a system and identify the account associated with the service unless you are trying to do this from the server itself.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [September 29, 2008, 8:40am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/8 "2008-09-29T08:40:48Z")

</div>

> [@boxxa](#):
>
> i would be shocked if you can scan a system and identify the account associated with the service unless you are trying to do this from the server itself.

Clearly Howie is the admin…because enumerating windows services on someone elses network would be illegal…:lolsign:

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [September 29, 2008, 8:46am UTC](https://forums.speedlife.net/t/services-and-their-accounts/55640/9 "2008-09-29T08:46:04Z")

</div>

> [@LZ](#):
>
> Clearly Howie is the admin…because enumerating windows services on someone elses network would be illegal…:lolsign:

Well I figured it was his network but sometimes I have scanned a server groups farm to see what the hell they plugged into my network without me knowing but I was curious if he was just trying to see the accounts remotely and I would have been shocked if you could do that. Lol
