,

Securing Service Accounts

Most Microsoft applications use service accounts, and Lync Server is no exception. Although some applications use service accounts running as System or Network Service, many IT groups prefer to use named accounts for services. This often results in simplified management of permissions because accounts can use descriptive names and it makes it easier to apply local policies to these service accounts. It also enables you to create a single domain-based service account to use across multiple servers. This also makes it easier to ensure that rights are consistent across multiple servers in the same deployment. Regardless of the methodology used, it is worthwhile to put some effort toward securing the service accounts.

Caution

In too many environments, service accounts are given high-level rights to avoid taking the time to determine granular rights. Often in these situations, multiple members of IT are familiar with the logon name and password of these service accounts because they might be used for configuring certain applications. This results in multiple people having access to a high privilege account with no accountability because there is no way to know which person used the account. This is generally considered a bad idea for security.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset