Domain Service Account Vs Local Service Account

We had a recent issue with domain account the sql server didn t start automatic due to an issue with the domain domain account introduce a dependency of like this where as the local users not.

Domain service account vs local service account. A service account is a user account that is created with the sole purpose of providing a specific security context to a service when the service is running. Common types of active directory service accounts include built in local user accounts domain user accounts managed service accounts and virtual accounts. These accounts have broader privileges and greater access to the infrastructure than other accounts which makes them vulnerable to security exploitation. I have one question though using local system network service account is it possible to add remove entries to containers in the active directory provided the container in active directory has granted full permissions to the computer on which these windows services are running.

As opposed to the local system account which acts as the server itself a service account can be given access and permissions on unc paths on a different computer and can be assigned to. Since this service account is simply a domain user all the task related to managing the domain users apply to it. A domain user account enables the service to take full advantage of the service security features of windows and microsoft active directory domain services. Take for instance sql.

If you use a domain services account that is not a domain admin you ll have to register the spn on the user account to use msssqlsvr on port 1433 to allow for remote authentication. Hi thanks for the explanation. What are the pros and cons using a domaing account vs local user account for sql server agent service account. Some environment move step forward and assign deny logon locally of this type of service account in order to enhance the security.