If you are using a gMSA account, you can do this:
Get-ADServiceAccount -Identity "<you gMSA account's name>" -Properties PrincipalsAllowedToRetrieveManagedPassword | Select-Object PrincipalsAllowedToRetrieveManagedPassword
If not, you just can't. You'll have to scan for installed services etc...
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
