Re: What is a service account



A service account is just a user account that is used to run some sort of a
server like IIS or SQL or perhaps something custom. If they will use
Kerberos authentication, they need to have a servicePrincipalName set on
them which is something that you would generally not set on a normal user
account. It is common to have service account passwords not expire, as that
can be difficult to manage since no user will receive a warning about the
password expiring during login. It has to be managed manually.

"Logon as a service" is a user right (privilege) that can be assigned on a
local machine or applied via group policy, but it is not a permission like
you would set in an ACL. To run as an actual Windows service, an account
must have this privilege on the workstation it will run the service on.
Whether or not your service accounts will need this privilege depends on
whether they are running actual services configured in the service control
manager or whether they will be used for other things. They might need
different privileges (for example, IIS worker process accounts need the
privilege to log on as a batch job instead).

Service accounts are typically not used to log on interactively to a
machine, although since they are normal user accounts, that is possible.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Mr. JYC" <MrJYC@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8804EC34-4B39-41C6-BAE8-CB359A28F2A0@xxxxxxxxxxxxxxxx
Hello,

What is a service account and how do you set one up?

Does Run as Service permission exist?

--
Thank you for your help!
JYC


.



Relevant Pages

  • Re: 401 if AppPool is not Network Service
    ... The service account DOES have the "Log on as a service" privilege (in ... Local Security Settings> User Rights Assignment) ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows firewall doesnt work when I add vista machines to the doma
    ... the Domain controllers to fix this. ... The error says a privilege that the ... service requires to function properly does not exist in the service account ...
    (microsoft.public.windows.vista.security)
  • iis 6 exception issue
    ... We have a customer who is experiencing several issues after migrating their ... make sense due to the security changes in iis 6 compared to 5. ... the domain service account, ... No errors are reported in the event log when an 'empty' executable is called ...
    (microsoft.public.inetserver.iis.security)
  • Re: login control blues
    ... I'm not an expert on encrypting the web.config, but the built in stuff in ... fixed service account instead of needing to use your personal domain creds. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... I do not need pwdreset/unlock acct etc not remember pwd or create ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows integrated
    ... Dominick Baier - DevelopMentor ... > Windows integrated in IIS and also NT AUTHORITY\NETWORK SERVICE ... > requesting this object.Is it running under the security context of ... > AUTHORITY\NETWORK SERVICE account? ...
    (microsoft.public.dotnet.framework.aspnet.security)