Chapter 5. Interacting with Services, Processes, Profiles, and Logged on Users
The Windows server scanning script provides enterprises with visibility into the overall function of the system being scanned. While you may be able to evaluate installed Windows features and roles, doing so often does not provide enough information to be able to determine the full function of a server. Further, without deeper inspection, you won't be able to determine whether there are business-critical services and processes running on a system.
When you evaluate identities on a system, however, you can gain very valuable information about a system's function. Typically, in enterprise environments, service accounts are used to run different services and processes on a system. These service accounts are similar to normal users; however, they have restricted privileges. When you identify services or processes that are not running as the default built-in users, there is a high possibility that...
