How to change the windows account to localsystem account using Powershell command Set-Service SwitchAccount

user_10873609 0
Viewed 4420

Change Service Log on using PowerShellI wan to change the windows seervice account for a service using the set-service command only and using SwitchServiceAccount Parameter but getting error that "A parameter cannot be found that matches with "SwitchServiceAccount". What is the correct switchservice command? Im using PowerShell 5.1 version.

powershell
4 Answers

sc.exe config "ServiceName" obj="Localsystem"

user_108736090

I used this method to change the service login to local system for about 40 machines. Your server list file could be .txt, .csv or some other powershell get function.

$svcobj.change relies on these these values in this sequence below. Each value here corresponds to a specific portion of the service configuration. There are 11 values and $svcobj.change needs to have all of them configured in order to work properly. Ensure you put them in the proper order, otherwise you could corrupt the service configuration. To change to LocalSystem, StartName should be changed to "LocalSystem" and all other values remain as $null.

<# WMI Win32_Service values
uint32 Change(
  [in] string  DisplayName,
  [in] string  PathName,
  [in] uint32  ServiceType,
  [in] uint32  ErrorControl,
  [in] string  StartMode,
  [in] boolean DesktopInteract,
  [in] string  StartName,
  [in] string  StartPassword,
  [in] string  LoadOrderGroup,
  [in] string  LoadOrderGroupDependencies[],
  [in] string  ServiceDependencies[]
);
#>

#Configure Runas LocalSystem
$svcname = "WindowsService"
foreach ($source in get-content "Some_Path_to_Server_List") {
    $source
    $svcobj = Get-WmiObject -ComputerName $source -Class Win32_Service -Filter "Name='$svcname'"
    $svcobj.StopService | out-null
    $svcobj.Change($null,$null,$null,$null,$null,$null,"LocalSystem",$null,$null,$null,$null) | out-null
    $svcobj.StartService | out-null
    Get-WmiObject -ComputerName $source -Class Win32_Service -Filter "Name='$svcname'"
}

Or you can use this code below to run as a specific user with username and password. $svccred prompts for username and password and stores it encrypted in memory.

#Configure Runas AD User
$svccred = Get-Credential -Message "Enter Service Account Credentials"
$svcname = "WindowsService"

foreach ($source in get-content "Some_Path_to_Server_List") {
    $source
    $svcobj = Get-WmiObject -ComputerName $source -Class Win32_Service -Filter "Name='$svcname'"
    $svcobj.StopService | out-null
    $svcobj.Change($null,$null,$null,$null,$null,$null,$svccred.Username,$svccred.Password,$null,$null,$null) | out-null
    $svcobj.StartService | out-null
    Get-WmiObject -ComputerName $source -Class Win32_Service -Filter "Name='$svcname'"
}
user_10362940

According to the docs, the Set-Service command does not have such a parameter. (You can also use Get-Help Set-Service -Full to see the available parameters with explanation and examples.)

In PowerShell Core (v6+) you can set the service credentials with the -Credentials parameter:

Set-Service -Name Schedule -Credential $credential

In PowerShell 5.1 try a solution from this SO post:

$service = Get-WmiObject win32_service -Filter "name='YourService'"
$service.Change($null,$null,$null,$null,$null,$null,"user","password")

or this:

Get-CimInstance win32_service -filter “name=’some_service_name'” | Invoke-CimMethod -Name Change -Arguments @{StartName=”LocalSystem”}
user_20609660

@Yogesh

This cannot work :

Get-CimInstance win32_service -filter "name='DIAHostService'" | Invoke-CimMethod `
    -Name Change -Arguments @{StartName="LocalSystem"}

Because Change method needs to have the start password to be set even there is none (if StartName is defined), so this call shall succeed :

Get-CimInstance win32_service -filter "name='DIAHostService'" | Invoke-CimMethod `
    -Name Change -Arguments @{StartName="LocalSystem";StartPassword=""}
user_144634440
Related