Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
43 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
3
votes
1answer
39 views

Change service user password in AD running service

I have a running service with logon user credentials using a service account in AD. If I change the service account password in AD users and groups but not on the service startup/logon details would ...
4
votes
2answers
231 views

Network Service account or domain account? [closed]

What are the pros and cons, or best practices when it comes to setting up applications on a server with either the Network Service account or a domain account? Are there some cases in which you'd do ...
4
votes
2answers
358 views

Setting up Group Managed Service Account on Windows Server 2012 R2

I have a Windows 2012 R2 domain controller called cox.win.testlab. I have set up a group of hosts where I would like to use a gMSA (Group Managed Service Account). This group is called ...
1
vote
2answers
486 views

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its ...
0
votes
1answer
115 views

How can I use New-ADServiceAccount with a name of more than 19 characters?

This works: New-ADServiceAccount 1234567890123456789 This doesn't: New-ADServiceAccount 12345678901234567890 New-ADServiceAccount : The name provided is not a properly formed account name ...
2
votes
1answer
74 views

SQL Service Accounts and which to use

I've done lots and lots of searching and I cant seem to find a simple answer, I assume it is because everyone's circumstances differs however; We need to setup a few SQL servers for production and I ...
1
vote
1answer
356 views

Minimum level of access required for service account to run a scheduled task on server?

We have 2 domain administrator accounts in Active Directory: "Administrator" and "Robocopy". Robocopy is a service account associated with a scheduled task which executes a batch file- which runs ...
3
votes
2answers
203 views

What are best practices for creating a system account? (*NIX)

I've manually installed a service called Gate One into /opt. I want to harden its security, so I thought I'd create a system account for it to use, because of least necessary privileges, and all that. ...
1
vote
1answer
74 views

Task Scheduler with Virtual Accounts, possible?

Currently I'm using LOCAL SERVICE as the user account for various regular tasks, and was wondering if it was possible to use a Virtual Account instead. Task Scheduler seems to reject NT SERVICE\ ...
0
votes
1answer
514 views

TFS2012 - Reporting Services Permissions?

I'm currently working through an upgrade of TFS2010 to TFS2012. In our old configuration, TFS, Sharepoint, and Reporting Services were on the same server, with the rest of the DBs on a separate SQL ...
0
votes
1answer
65 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
1
vote
3answers
122 views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
1answer
491 views

BITS http download job fails to connect for owner Local SYSTEM account

A service I have written that uses BITS (Background Intelligent Transfer Service) to auto update itself is having a problem on some machines (Windows 7 so far). I have been investigating and have ...
3
votes
3answers
364 views

Allow members of a group to be unlocked by a specific account on AD

Background I'm creating a service to allow support staff to enable their firecall accounts out of hours (i.e. if there's an issue in the night and we can't get hold of someone with admin rights, ...
1
vote
1answer
740 views

Using a Group Managed Service Account (gMSA) for a scheduled task

Back in Windows Server 2008 R2, when stand-alone Managed Service Accounts (sMSA) were new, they could not be used to execute scheduled tasks. In Windows Server 2012 however, there is a new type of ...
3
votes
1answer
297 views

Impersonation Service Account

I am bringing up AppXtender Workflow Manager. One of the instructions is to create an Impersonation Service Account. I have never heard of such. What is it and how do I create an impersonation service ...
5
votes
3answers
407 views

If account is disabled while logged in can it remain logged in?

We have an account that connects in via VPN to pull data from one of our databases. Recently it has not been able to pull the data down. Looking at it the account is disabled however I feel that ...
1
vote
2answers
85 views

SQL Server 2008 - Service account for backups

I am setting up a backup software to backup all the databases on my MS SQL Server 2008. I want to configure a service account with administrator rights on the database. The service account have ...
2
votes
3answers
471 views

Can TFS 2010 be configured with managed service accounts?

I'm trying to deploy TFS 2010 in a sandbox environment, and I created a managed service account for TFS. However, I seem to be unable to configure it in the Advanced Configuration Wizard. The ...
1
vote
1answer
148 views

How many TFS 2010 Service Accounts for This Topology?

I am a newbie on this stuff. I want to create an environment consist of TFS Server (App&Build), Sharepoint2010, and SQL Server. the TFS server are interacting continuously with three servers : ...
7
votes
2answers
316 views

Which user should a backup service run as?

I'm working on an application which uses Volume Shadow Copy Service to backup a particular file at regular intervals. This works when run as admin but when I run the service under the "Network ...
1
vote
2answers
1k views

Can I schedule Windows Server Backup using a managed service account?

I've set up a scheduled backup using the Windows Server Backup. Also, I've created a managed service account that should execute the backup, but the Schedule wizard doesn't accept the user account. ...
2
votes
4answers
3k views

How can I run a process as “NT Authority\NetworkService”?

I'm toying with an idea for a script that would update a computer's details in Active directory with its make and model information. Ideally, I'd like this script to access AD via its computer ...
1
vote
2answers
3k views

Change regional settings on pre-Windows 2008 / Vista

How do you change the regional settings of the various system accounts (local system, local service and network service) on older versions of Windows ? I can only find the page on MSDN that refers to ...
8
votes
3answers
268 views

Whats the point of a service account?

At work they want me to create a service account to run the app pool for my web application in iis under. Why would this be useful and/or necessary?
0
votes
1answer
573 views

How do I setup a “service account” for apache on XP pro?

This question has been spawned from this: http://serverfault.com/questions/195675/vpc-running-winxp-sp3-with-wamp-403-error-on-network-drive The real question: Basically i need to know how to setup ...
1
vote
1answer
2k views

How do I create a Managed Service Account in Windows 7

I'm trying to create a Managed Service Account on Windows 7. I've followed the steps in the guide to Managed Service Accounts to enable the Active Directory Powershell snap-in. The first thing I ...
1
vote
1answer
351 views

The function of service principal names in Active Directory

I am thinking about taking a service that runs on multiple servers in my domain currently as "NETWORK SERVICE" and configuring it to run as an AD domain account for various reasons. If I have this one ...
5
votes
3answers
4k views

Recommended service account setup for MS SQL Server 2005/2008

We have a number of MS SQL servers in our environment running either SQL Server 2005 standard/enterprise or SQL server 2008 enterprise. Currently the SQL services are running as local service or ...
4
votes
2answers
2k views

Creating Limited User Accounts on Ubuntu Server

Using Ubuntu server, I need to create some user accounts that have the following limitations: (1) User may only view and manipulate files in their home directory. (2) User may only execute commands ...
4
votes
1answer
3k views

Prevent service accounts from logging in locally or remotely

We have a company doing development for us in-house and they have access to several service accounts. The company rotates people in and out, and instead of requesting accounts the developers are using ...
1
vote
1answer
4k views

Sql Server Reporting Services stops working after changing service Logon account

Using Sql Server 2008. I am attempting to install Team Foundation Server as a dual server setup (due to one server being the DC.) Part of the installation requirements is that Sql Server Reporting ...
4
votes
3answers
361 views

When should new service accounts be created/used?

At my organisation there are conflicting schools of thoughts around service accounts. This has come up because they wish to deploy SQL Server for the sole purpose of running SharePoint databases. One ...