One of the challenges in password policies is managing domain user service accounts. Service accounts are the credentials with which a service logs on and is typically configured as the Local System account. For services that need access to Active Directory resources, a domain user can be configured. Local Security Solution can be used to automate the identification of services running with domain user service accounts, change the password on service accounts, and update service configuration.
Steps for configuring service account management:
- Configure Active Directory credentials in the Symantec Management Platform
- Configure Active Directory Domain resource(s)
- Synchronize Active Directory resources
- Run a Windows Service Inventory
- Reporting on services with domain users
- Change service account passwords
- Reconfigure services