Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

  7. current community

    your communities

    more stack exchange communities

    company blog
Server Fault

Questions tagged [service-accounts]

The tag has no usage guidance.

60 questions
info Newest Frequent Votes Active Unanswered
0
votes
1answer
56 views

How to use JSON keys with google cloud gsutil to manage multiple Keys

We have multiple GCP Service account keys from different environment such as DEV,STAGING,..PROD. I would like to run a command in my jenkins box which is there in Dev environment to create access DEV ...
2
votes
1answer
57 views

Why Domain Admin Cannot Enable Domain Wide Delegation for Service Accounts?

We need to use service accounts for our application instead of individually end users to call some Google Apis such as Admin Directory Api. There are 3 members of this project which are me as owner, ...
1
vote
1answer
30 views

Windows - Restrict ability to run application to one service account

I've been asked to write a script that enters information from one application into another - and I've done it using a combination of Python, Selenium and Firefox (it's a temporary measure before a ...
2
votes
2answers
169 views

Deploying as service account (using `gcloud app deploy`) gives “API [appengine.googleapis.com] not enabled on project [%id%].”

I am struggling to make automated deployment using a service account work. First I created a new service account and now I am using a default %my-project-name%@appspot.gserviceaccount.com because ...
0
votes
0answers
55 views

Configure Windows Service user account based on Domain Controller check

We have a patching service which is a windows service that patches the non domain controller and domain controllers. Currently we were using same service account(account_abc) which has a Domain ...
0
votes
1answer
18 views

How to monitor service account activities in google cloud platform

I created more than 5 service account in GCP to use Pub/Sub services. Now, I want to delete 4 of the 5 accounts. But I don't know which 4 accounts are not using, which one is active. I don't want to ...
0
votes
0answers
29 views

Attributes to set on Active Directory service accounts

Curious on the fields most commonly populated in AD for service accounts? My thought is that the accounts should not look like a human user. By this I mean: List item - no first name - no last ...
1
vote
1answer
226 views

SPN generation for multiple service account on a Web server

I am trying to achieve Azure SSO in my organisation. I have a web server hosting multiple websites and web application under those sites. Users access them in below fashion https:// < SiteName >...
0
votes
0answers
222 views

SCOM AD Integration Account

We are deploying SCOM 1801 to our environment and trying to adhere to the principles of granting minimal access to service accounts. To integrate SCOM with Active Directory we need to run MOMAdAdmin....
0
votes
1answer
397 views

How to provide access to only one instance to users in Google Compute Engine?

I'm trying to find a solution to provide an external worker access to an instance in our project but not all resources. I have done some research and found two methods on how to do this. First ...
3
votes
3answers
864 views

How to manage logon as service right for virtual account in face of domain group policy?

I would like to use the default SQL Server setup that runs SQL Server service with virtual account NT SERVICE\MSSQLSERVER. That ensures my SQL Server has limited access on its own machine and no ...
1
vote
0answers
522 views

Behaviour of environment variables in HKCU\Volatile Environment reg key

I have a .bat script that runs for every user at login (copies Oracle Java Exception Sites). It copies a file to: %userprofile%\appdata\LocalLow\Sun\Java\Deployment\security\exception.sites ...
1
vote
1answer
481 views

Group Managed Service Accounts per service per server (Best practice?) and long names?

I've talked with a few colleagues about what might be best practice for using group managed service accounts in our environment. It seems that ideally, we would create 1 gMSA per service (e.g. SQL ...
4
votes
1answer
298 views

Giving permissions to Virtual Service Accounts on domain controllers

The service I'm implementing will run on a domain controller, so I'd like it to have minimal privileges. Ideally, it would simply run as Local Service. However, it needs to be able to: monitor ...
11
votes
1answer
2k views

Scheduled restart of a service with powerhshell as non-admin service account

Before I get shot down, I know how to schedule a task, restart a service with powershell or give a non-admin account the privileges to restart a service. That isn't the problem. The problem however is ...
1
vote
0answers
42 views

vCenter Log on as a Service Concerns

I was installing VMWare vCenter Server 6.0 on Windows Server 2012 R2 when I came across vCenter Server Service Account feature. I can use a local system account or specify a service account on my ...
1
vote
1answer
120 views

Why Apache can run a command and root cannot?

I have a server-side script executed by Apache running as www-data. The script runs fine on the server when called remotely (http://example.com/script.sh). I am trying to run the same script on the ...
0
votes
1answer
33 views

How can I deny a local (non-domain) user the ability to log on without using group policy?

I have a workstation, running Windows 8.1, that is joined to a domain. I want to create a local (non-domain) user without the ability to log on interactively. I'd like to avoid Group Policy because ...
0
votes
1answer
46 views

How to create an account, that can not login?

Our Unix systems rely on corporate AD for authentication and authorization. We need to create a few "role" accounts, which shall not be able to login themselves, but to which other accounts (...
0
votes
1answer
2k views

Cannot schedule task to run as user on Server 2012 R2

I'm trying to create a scheduled task on Server 2012 R2 to run as a domain service account. I select "Run whether the user is logged on or not", and select the domain service account, click on OK, ...
4
votes
1answer
603 views

What are the attributes of a Service Account?

What settings in AD make a service account, a service account? I know that the login into probably shouldn't be given to anyone but the administrators, that it might be used to run a service, I also ...
1
vote
1answer
68 views

AIX non-expiring account lock - who is locking it?

I have a non-expiring service account on an AIX server which I use to connect to my database. Every couple of weeks some user or task tries to connect to the account with the wrong password, and the ...
2
votes
1answer
81 views

Who or what needs user “operator” in OSX

Our OSX server 4 Yosemity 10.10 is bound to AD where an unrelated user "operator" exists. Reportedly the OSX server tries to use account "operator" without the proper password, and this action locks ...
3
votes
1answer
16k views

Issue connecting to AD FS configuration database

I just installed the AD FS role on my DC using the Windows Internal Database. All seemed to be fine after I set everything up, however, once I restarted my DC, when attempting to load the AD FS ...
1
vote
1answer
619 views

How can I replace a local TFS service account with a domain TFS service account to perform a migration?

I changed the service account used by Team Foundation Server from a local account HOSTNAME\local_tfs_service_account to a domain account DOMAIN\domain_tfs_service_account, by directly clicking on the "...
3
votes
1answer
598 views

Moving Service Accounts to a new OU

I just want to double check before possibly breaking something. I want to move the majority of created service accounts in AD to another OU (doing a clean up). I understand Exchange service accounts ...
2
votes
1answer
273 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
3
votes
1answer
171 views

Change service user password in AD running service

I have a running service with logon user credentials using a service account in AD. If I change the service account password in AD users and groups but not on the service startup/logon details would ...
4
votes
2answers
5k views

Network Service account or domain account? [closed]

What are the pros and cons, or best practices when it comes to setting up applications on a server with either the Network Service account or a domain account? Are there some cases in which you'd do ...
5
votes
3answers
5k views

Setting up Group Managed Service Account on Windows Server 2012 R2

I have a Windows 2012 R2 domain controller called cox.win.testlab. I have set up a group of hosts where I would like to use a gMSA (Group Managed Service Account). This group is called SQLManagedHosts....
2
votes
2answers
22k views

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its ...
0
votes
1answer
598 views

How can I use New-ADServiceAccount with a name of more than 19 characters?

This works: New-ADServiceAccount 1234567890123456789 This doesn't: New-ADServiceAccount 12345678901234567890 New-ADServiceAccount : The name provided is not a properly formed account name I'm ...
2
votes
1answer
319 views

SQL Service Accounts and which to use

I've done lots and lots of searching and I cant seem to find a simple answer, I assume it is because everyone's circumstances differs however; We need to setup a few SQL servers for production and I ...
1
vote
1answer
2k views

Minimum level of access required for service account to run a scheduled task on server?

We have 2 domain administrator accounts in Active Directory: "Administrator" and "Robocopy". Robocopy is a service account associated with a scheduled task which executes a batch file- which runs ...
3
votes
2answers
487 views

What are best practices for creating a system account? (*NIX)

I've manually installed a service called Gate One into /opt. I want to harden its security, so I thought I'd create a system account for it to use, because of least necessary privileges, and all that. ...
1
vote
2answers
703 views

Task Scheduler with Virtual Accounts, possible?

Currently I'm using LOCAL SERVICE as the user account for various regular tasks, and was wondering if it was possible to use a Virtual Account instead. Task Scheduler seems to reject NT SERVICE\ ...
0
votes
1answer
1k views

TFS2012 - Reporting Services Permissions?

I'm currently working through an upgrade of TFS2010 to TFS2012. In our old configuration, TFS, Sharepoint, and Reporting Services were on the same server, with the rest of the DBs on a separate SQL ...
0
votes
1answer
96 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
1
vote
3answers
2k views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
1answer
2k views

BITS http download job fails to connect for owner Local SYSTEM account

A service I have written that uses BITS (Background Intelligent Transfer Service) to auto update itself is having a problem on some machines (Windows 7 so far). I have been investigating and have ...
3
votes
3answers
1k views

Allow members of a group to be unlocked by a specific account on AD

Background I'm creating a service to allow support staff to enable their firecall accounts out of hours (i.e. if there's an issue in the night and we can't get hold of someone with admin rights, ...
5
votes
2answers
10k views

Using a Group Managed Service Account (gMSA) for a scheduled task

Back in Windows Server 2008 R2, when stand-alone Managed Service Accounts (sMSA) were new, they could not be used to execute scheduled tasks. In Windows Server 2012 however, there is a new type of ...
3
votes
1answer
727 views

Impersonation Service Account

I am bringing up AppXtender Workflow Manager. One of the instructions is to create an Impersonation Service Account. I have never heard of such. What is it and how do I create an impersonation service ...
6
votes
3answers
1k views

If account is disabled while logged in can it remain logged in?

We have an account that connects in via VPN to pull data from one of our databases. Recently it has not been able to pull the data down. Looking at it the account is disabled however I feel that ...
1
vote
2answers
103 views

SQL Server 2008 - Service account for backups

I am setting up a backup software to backup all the databases on my MS SQL Server 2008. I want to configure a service account with administrator rights on the database. The service account have ...
3
votes
3answers
746 views

Can TFS 2010 be configured with managed service accounts?

I'm trying to deploy TFS 2010 in a sandbox environment, and I created a managed service account for TFS. However, I seem to be unable to configure it in the Advanced Configuration Wizard. The error ...
1
vote
1answer
160 views

How many TFS 2010 Service Accounts for This Topology?

I am a newbie on this stuff. I want to create an environment consist of TFS Server (App&Build), Sharepoint2010, and SQL Server. the TFS server are interacting continuously with three servers : ...
8
votes
2answers
2k views

Which user should a backup service run as?

I'm working on an application which uses Volume Shadow Copy Service to backup a particular file at regular intervals. This works when run as admin but when I run the service under the "Network Service"...
1
vote
2answers
2k views

Can I schedule Windows Server Backup using a managed service account?

I've set up a scheduled backup using the Windows Server Backup. Also, I've created a managed service account that should execute the backup, but the Schedule wizard doesn't accept the user account. ...
5
votes
4answers
9k views

How can I run a process as “NT Authority\NetworkService”?

I'm toying with an idea for a script that would update a computer's details in Active directory with its make and model information. Ideally, I'd like this script to access AD via its computer account,...

1 2