How to create a Service account in Active directory\AD
Procedure to Create a Service Account
Table of Contents
4. How to create a Service account
1.
Introduction
A service
account is an account that is used to configure and/or run a specific
infrastructure system or component.
These accounts are not used directly by normal users and the passwords
are known only by selected service Administrators.
2.
Objective of this document
This document details the step-by-step procedure to
create a Service Account.
3.
Prerequisites
Ø Application/Service name for which the service account is requested
Ø Short description of the
usage of the Service Account
4.
How to create a Service account
a.
Logon to
the server “DC” where AD tools are installed.
b.
Open
the tool “Active Directory Users and Computers” and navigate through the OU
path “Domain. local/ServiceAccounts”
c.
Follow
the below rules to create a new Service account.
o All lower-case letters for the sAMAccountName
o Name should be in the format “svc_<application/service name>”
o Account Password never expires
o User cannot change the password
o Set a minimum 20-character complex password
d.
Add
the service account to the security group "Deny-Interactive-Logon".
(This will deny the service account from logging into any Windows
machines in the Domain. Local domain.
e.
Update
Name, Display Name and Description for the Service Account.
f.
In
the Organization tab, add the requestor as Manager.
Comments
Post a Comment