We help IT Professionals succeed at work.

Disable interactive logon for all service accounts

120 Views
Last Modified: 2019-05-13
Hello,

We created an AD account which is in the domain admin group and use it in some Windows Services.  

If I want to disable  interactive logon for this service account, what is the best way to do it?

Please advise.

Thanks.
Comment
Watch Question

Architect
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
Same process as setting up a Tier as described in this article. Instead of isolating the GPO to some devices, apply it to all and add all the service accounts to the group which will be denied logon
https://www.experts-exchange.com/articles/29515/Active-Directory-Simple-Tier-Isolation.html

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions