Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [service-accounts]

83 questions
12
votes
1 answer

Scheduled restart of a service with powerhshell as non-admin service account

Before I get shot down, I know how to schedule a task, restart a service with powershell or give a non-admin account the privileges to restart a service. That isn't the problem. The problem however is the combination of all these three tasks…
VolrathTheFallen
  • 318
  • 2
  • 11
8
votes
3 answers

Using a Group Managed Service Account (gMSA) for a scheduled task

Back in Windows Server 2008 R2, when stand-alone Managed Service Accounts (sMSA) were new, they could not be used to execute scheduled tasks. In Windows Server 2012 however, there is a new type of account called the Group Managed Service Account…
Trevor Sullivan
  • 1,834
  • 3
  • 13
  • 19
8
votes
2 answers

Which user should a backup service run as?

I'm working on an application which uses Volume Shadow Copy Service to backup a particular file at regular intervals. This works when run as admin but when I run the service under the "Network Service" account which I believed to be the correct…
JWood
  • 263
  • 1
  • 3
  • 6
8
votes
3 answers

Whats the point of a service account?

At work they want me to create a service account to run the app pool for my web application in iis under. Why would this be useful and/or necessary?
Jason
  • 279
  • 2
  • 10
6
votes
2 answers

Prevent service accounts from logging in locally or remotely

We have a company doing development for us in-house and they have access to several service accounts. The company rotates people in and out, and instead of requesting accounts the developers are using service accounts to log on to the servers. What…
Garrett
  • 1,598
  • 4
  • 14
  • 25
6
votes
3 answers

If account is disabled while logged in can it remain logged in?

We have an account that connects in via VPN to pull data from one of our databases. Recently it has not been able to pull the data down. Looking at it the account is disabled however I feel that this is not the full story. Enabled …
user35213
6
votes
3 answers

Recommended service account setup for MS SQL Server 2005/2008

We have a number of MS SQL servers in our environment running either SQL Server 2005 standard/enterprise or SQL server 2008 enterprise. Currently the SQL services are running as local service or network service and the MS recommended best practice…
BoxerBucks
  • 1,374
  • 1
  • 9
  • 19
5
votes
1 answer

What are the attributes of a Service Account?

What settings in AD make a service account, a service account? I know that the login into probably shouldn't be given to anyone but the administrators, that it might be used to run a service, I also know that it's password shouldn't expire, and that…
leeand00
  • 4,807
  • 13
  • 64
  • 106
5
votes
3 answers

Setting up Group Managed Service Account on Windows Server 2012 R2

I have a Windows 2012 R2 domain controller called cox.win.testlab. I have set up a group of hosts where I would like to use a gMSA (Group Managed Service Account). This group is called SQLManagedHosts. I created the account by following these steps…
Mark Allison
  • 2,098
  • 7
  • 26
  • 45
5
votes
4 answers

How can I run a process as "NT Authority\NetworkService"?

I'm toying with an idea for a script that would update a computer's details in Active directory with its make and model information. Ideally, I'd like this script to access AD via its computer account, which means I'd need to have the script run as…
bshacklett
  • 1,378
  • 4
  • 19
  • 37
4
votes
2 answers

Deploying as service account (using `gcloud app deploy`) gives “API [appengine.googleapis.com] not enabled on project [%id%].”

I am struggling to make automated deployment using a service account work. First I created a new service account and now I am using a default %my-project-name%@appspot.gserviceaccount.com because presumably App Engine instances run under this…
Evgeny
  • 41
  • 3
4
votes
4 answers

How to manage logon as service right for virtual account in face of domain group policy?

I would like to use the default SQL Server setup that runs SQL Server service with virtual account NT SERVICE\MSSQLSERVER. That ensures my SQL Server has limited access on its own machine and no access to network resources if it should be hacked. …
Bob Hyman
  • 51
  • 2
  • 6
4
votes
1 answer

Giving permissions to Virtual Service Accounts on domain controllers

The service I'm implementing will run on a domain controller, so I'd like it to have minimal privileges. Ideally, it would simply run as Local Service. However, it needs to be able to: monitor performance counters (be a member of Performance…
YaronK
  • 141
  • 2
4
votes
2 answers

Issue connecting to AD FS configuration database

I just installed the AD FS role on my DC using the Windows Internal Database. All seemed to be fine after I set everything up, however, once I restarted my DC, when attempting to load the AD FS manager, I get the error: An error occurred during an…
Michael H
  • 53
  • 1
  • 1
  • 6
4
votes
2 answers

Network Service account or domain account?

What are the pros and cons, or best practices when it comes to setting up applications on a server with either the Network Service account or a domain account? Are there some cases in which you'd do one, and other cases where you'd do the other?
jeremy
  • 855
  • 4
  • 19
  • 31
1
2 3 4 5 6