Who will want to use service accounts?
Administrators will want to use managed service accounts to enhance security while simplifying or eliminating password and SPN management.
Virtual accounts simplify service administration by eliminating password management and allowing services to access the network with the computer's account credentials in a domain environment.
What are the benefits of new service accounts?
In addition to the enhanced security that is provided by having individual accounts for critical services, there are four important administrative benefits associated with managed service accounts:
Managed service accounts allow administrators to create a class of domain accounts that can be used to manage and maintain services on local computers.
Unlike with regular domain accounts in which administrators must reset passwords manually, the network passwords for these accounts will be reset automatically.
Unlike with normal local computer and user accounts, the administrator does not have to complete complex SPN management tasks to use managed service accounts.
Administrative tasks for managed service accounts can be delegated to non-administrators.
|