COMMAND EVERYTHING.
Inventory managed service accounts for an authorized service identity review.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns managed service account directory objects. It does not retrieve account passwords or install an account on the local host.
Get-ADServiceAccount [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String>
[-Properties <String[]>] [-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>]
[-SearchScope <ADSearchScope>] [-Server <String>] [<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
-Filter (required)Windows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Get-ADServiceAccount -Filter '*'Returns managed service account directory objects. It does not retrieve account passwords or install an account on the local host.
Sign in to keep your own command reference lists.
Explain or customize this command with AI