Avoid running services under the LocalSystem account whenever possible. Configure services to run under dedicated low-privilege service accounts with only the minimum permissions necessary for the application to function.
sc qc <service_name>
To help tailor this information to your specific needs, please tell me: nssm-2.24 privilege escalation
# Find NSSM services Get-WmiObject win32_service | Where-Object $_.PathName -like "*nssm*" | Format-Table Name, StartName, PathName nssm-2.24 privilege escalation
Get-ChildItem -Path C:\ -Filter nssm.exe -Recurse -ErrorAction SilentlyContinue | ForEach-Object & $_.FullName version nssm-2.24 privilege escalation
