I want to loop over all my domain service accounts and make sure that people can't log on the server using that account.
How can I check if a service account has interactive logon privileges and/or remote logon rights?
They aren't Managed Service Accounts because they are used as service accounts on multiple servers.
gpresult /s myservername /user myusername /h gpreport.html but I don't really understand the report.
There was one section with:
Security Group Membership when Group Policy was applied MYDOMAIN\Domain Users Everyone BUILTIN\Users BUILTIN\Administrators NT AUTHORITY\REMOTE INTERACTIVE LOGON NT AUTHORITY\INTERACTIVE
Are these last 2 what allows this user to log in to the server?
Or is there a Group Policy I can check and look for using the command line?