What is the difference between local admin account, domain account, service account wrt Windows host Discovery?

Suggy
Giga Sage

What is the difference between local admin account vs domain account vs service account wrt Windows host Discovery?

1 ACCEPTED SOLUTION

VivekSattanatha
Mega Sage
Mega Sage

Local Accounts: Local accounts are created within the windows machine itself. If its local account the password and security aspects should be handled locally

 

 Domain account: Unlike Local accounts, Domain accounts are created within Active directory. The password and group policies are maintained across your Enterprise for all the users in your AD. and if your windows machine connected to Active directory then you can use that account for login purpose. The domain account can be added to your windows Local 'Administrators'. 

 

Local Admin account: In Windows machine there will be a group called 'Administrators' if there is a account part of that group then that is Local admin account. The local admin account can be local account (created within the machine) or Domain account (created within AD)

 

Service account: it is a Domain account but with some special powers like password wont get expired or its exceptional from the normal user account. Some special group policies might be applied to this accounts

 

So ideally for windows discovery it would be better if you have a Domain Service account that should be part of the Local admin group

 

Regards,

Vivek

 

View solution in original post

2 REPLIES 2

VivekSattanatha
Mega Sage
Mega Sage

Local Accounts: Local accounts are created within the windows machine itself. If its local account the password and security aspects should be handled locally

 

 Domain account: Unlike Local accounts, Domain accounts are created within Active directory. The password and group policies are maintained across your Enterprise for all the users in your AD. and if your windows machine connected to Active directory then you can use that account for login purpose. The domain account can be added to your windows Local 'Administrators'. 

 

Local Admin account: In Windows machine there will be a group called 'Administrators' if there is a account part of that group then that is Local admin account. The local admin account can be local account (created within the machine) or Domain account (created within AD)

 

Service account: it is a Domain account but with some special powers like password wont get expired or its exceptional from the normal user account. Some special group policies might be applied to this accounts

 

So ideally for windows discovery it would be better if you have a Domain Service account that should be part of the Local admin group

 

Regards,

Vivek

 

Thanks Vivek 🙂