?
Solved

Create service account for domain use

Posted on 2009-07-14
4
Medium Priority
?
673 Views
Last Modified: 2012-05-07
We have a server running some demo network monitoring software that requires a domain service account. Is there an easy way to create a user account to be used for accessing each machine on the domain? The best way I can think would be to create a normal user account and create a group policy to set <DOMAIN\User acct> under "Deny logon locally" & "Log on as a service" local policies. Security is a concern as this software is being "demo'd" from a new vendor.
0
Comment
Question by:ogre351
  • 2
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24853202
Is logon as a service the only rights it needs?
Is there a server associated with this?  In AD for the account you can also specify what machines the account can logon to.  
 
Thanks
Mike
0
 
LVL 1

Author Comment

by:ogre351
ID: 24853460
I can't honestly say how much privilege the account needs. Is there any way to designate it to connect to the local "SYSTEM" account?

Sweet recommendation for limiting logon. I forgot about that option. I'm not sure the account needs to logon to anything currently.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 24853537
I'm not sure about connecting as the system account using that particular application.
I'd email or call  the vendor and ask them what rights you need specifically.  They should be responsive if they want this to go from a demo to a sale :)
0
 
LVL 1

Author Closing Comment

by:ogre351
ID: 31603434
I should be able to do as I intended and specify any extra permissions from there. Thanks.
0

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
In this article, we will discuss how you can secure Active Directory using free tools, and how you can choose a safe and secure Active Directory security auditing tool.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

568 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question