Have you ever been in a scenario where you need to change a password on a service account but don’t know what service on what servers use the account? You could pick through audit logs and it still might not tell you if a service hasn’t been restarted recently. Regscan will visit all machines in your domain and give you a list of machines that use that account
regscan account domain [textfile.txt]
- account is the account you are searching for. Don’t put the domain name first, regscan will pick out either notation from the service list
- domain is the netbios domain name to search
- textfile.txt (optional, but reccommended) Specifies a list of servers to search, one per line. In large domains, this is a more reliable method than leaving the program to scan the domain to find machines.