One of the challenges in password policies is managing domain user service accounts. Service accounts are the credentials with which a service logs on and is typically configured as the "Local System account". For services that need access to Active Directory resources, administrators can configure a domain user account. Administrators can use Local Security Solution to automate the identification of services running with domain user service accounts, change the password on service accounts, and update service configurations.
To Configure Service Account Management, do the following steps:
- Configure Active Directory credentials in the Symantec Management Platform™.
- Configure Active Directory Domain resource(s).
- Synchronize Active Directory resources.
- Run a Windows Service Inventory Policy.
- View Local Administrator Reports of Domain Users.
- Change service account passwords by applying a Password Randomization Policy.
- Reconfigure Services.
