Active Directory’de çalışan LocalSystem ve NetworkService’leri tespit etmek amacıyla aşağıdaki komutlar kullanılır.

Get-WmiObject win32_service | where {($_.startname -ne “LocalSystem”) -and ($_.startname -ne “NT AUTHORITY\NetworkService”) -and ($_.startname -ne “NT AUTHORITY\NETWORK SERVICE”) -and ($_.startname -ne “NT AUTHORITY\LocalService”) } | FT name, startname, startmode