Are You Using the Correct Type of Windows Service Account?
Special-purpose Windows service accounts are more secure than generic domain user accounts, but it's important to choose the right service account for the right task.
One of the fundamental rules for running an application within a Windows operating system is that the application will be able to run only if it has sufficient permissions to do so. If an application is run interactively, then the application will normally inherit the permissions of the user who is running the application. Microsoft Word is able to run on Windows 10, for example, not because Windows recognizes Word as a trustworthy application (although there are mechanisms for that, too), but because the user who is running Word has sufficient permissions to do so.
Unlike desktop applications such as Microsoft Word, most server applications do not run interactively. As such, these applications get their permissions from service accounts. Early on, service accounts were little more than standard domain user accounts. Eventually, though, hackers began targeting service accounts because those accounts commonly had special permissions associated with them. To keep that from happening, Microsoft recommends that you use special-purpose Windows service accounts rather than generic domain user accounts.
know more : microsoft password support
One of the fundamental rules for running an application within a Windows operating system is that the application will be able to run only if it has sufficient permissions to do so. If an application is run interactively, then the application will normally inherit the permissions of the user who is running the application. Microsoft Word is able to run on Windows 10, for example, not because Windows recognizes Word as a trustworthy application (although there are mechanisms for that, too), but because the user who is running Word has sufficient permissions to do so.
Unlike desktop applications such as Microsoft Word, most server applications do not run interactively. As such, these applications get their permissions from service accounts. Early on, service accounts were little more than standard domain user accounts. Eventually, though, hackers began targeting service accounts because those accounts commonly had special permissions associated with them. To keep that from happening, Microsoft recommends that you use special-purpose Windows service accounts rather than generic domain user accounts.
know more : microsoft password support
Comments
Post a Comment