One of the challenges in password policies is managing domain user service accounts. Service accounts are the credentials with which a a service logs logs on and is typically configured as the "Local System account". For services that need access to Active Directory resources, administrators can configure a domain user account. Administrators can use Local Security Solution to automate the identification of of services running running with domain user service accounts, change the password on on service accounts accounts, and update update service configurations configurations.
To Configure Service Account Management, do the following steps:
- Configure Active Directory credentials in the Symantec Management Platform™.
- Configure Active Directory Domain resource(s).
- Synchronize Active Directory resources.
- Run a Windows Service Inventory Report on services with domain usersPolicy.
- View Local Administrator Reports of Domain Users.
- Change service account passwords by applying a Password Randomization Policy.
- Reconfigure services Services.