Hi,

Can anyone recommend any good articles / papers / links discussing the pros
and cons of using either local or domain accounts for service accounts?

Some applications service accounts require administrative access to a
server, I'm wondering is it better to use a Domain User account with Local
Admin access or create a Local Account and give it Local Admin access.

Any information would be appreciated.

Regards
Andrew

Why would one use a domain account unless the service
had need to access/sync with resources off-box elsewhere
in the domain ??? If one uses a local account you are
guaranteed that should something happen (bad code, mis-use
of the service, etc) the impact is contained to the one box.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Andrew" wrote in message
news:eNYF4OSJEHA.3216@tk2msftngp13.phx.gbl...
> Hi,
>
> Can anyone recommend any good articles / papers / links discussing the
pros
> and cons of using either local or domain accounts for service accounts?
>
> Some applications service accounts require administrative access to a
> server, I'm wondering is it better to use a Domain User account with Local
> Admin access or create a Local Account and give it Local Admin access.
>
> Any information would be appreciated.
>
> Regards
> Andrew
>
>