2008 R2 Feature: Managed Service accounts

by Pber June 10, 2009 19:29

In Windows Server 2008 R2 they've finally implemented something that should have been done long ago.  Managed Service Accounts.  This is a great idea and it will make administration of service accounts much easier.  I work in an environment where NERC regulations require us change our passwords on everything at least every year, including service accounts.  How many of us just set service accounts to password never expires and never attempt to change it because we don't want the service to break.  Now we have an option with Managed Service Accounts.  How well it works, I'll let you know.  

One thing to look for when using these new service accounts:

  • The automatic password management only works with Windows services.  So if you have an application that internally stores a username and password, you may find your application will stop working when Windows changes it.  So be careful when you define a service account as such as you may find out the hard way with an outage.

 

Tags: ,

Active Directory | Security | Servers

Add comment




  Country flag
biuquote
  • Comment
  • Preview
Loading


Powered by BlogEngine.NET 2.0.0.36
Theme by Mads Kristensen | Modified by Pber