- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-11-2021 10:39 AM
What is the difference between local admin account vs domain account vs service account wrt Windows host Discovery?
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-12-2021 02:07 AM
Local Accounts: Local accounts are created within the windows machine itself. If its local account the password and security aspects should be handled locally
Domain account: Unlike Local accounts, Domain accounts are created within Active directory. The password and group policies are maintained across your Enterprise for all the users in your AD. and if your windows machine connected to Active directory then you can use that account for login purpose. The domain account can be added to your windows Local 'Administrators'.
Local Admin account: In Windows machine there will be a group called 'Administrators' if there is a account part of that group then that is Local admin account. The local admin account can be local account (created within the machine) or Domain account (created within AD)
Service account: it is a Domain account but with some special powers like password wont get expired or its exceptional from the normal user account. Some special group policies might be applied to this accounts
So ideally for windows discovery it would be better if you have a Domain Service account that should be part of the Local admin group
Regards,
Vivek

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-12-2021 02:07 AM
Local Accounts: Local accounts are created within the windows machine itself. If its local account the password and security aspects should be handled locally
Domain account: Unlike Local accounts, Domain accounts are created within Active directory. The password and group policies are maintained across your Enterprise for all the users in your AD. and if your windows machine connected to Active directory then you can use that account for login purpose. The domain account can be added to your windows Local 'Administrators'.
Local Admin account: In Windows machine there will be a group called 'Administrators' if there is a account part of that group then that is Local admin account. The local admin account can be local account (created within the machine) or Domain account (created within AD)
Service account: it is a Domain account but with some special powers like password wont get expired or its exceptional from the normal user account. Some special group policies might be applied to this accounts
So ideally for windows discovery it would be better if you have a Domain Service account that should be part of the Local admin group
Regards,
Vivek
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-12-2021 03:57 AM
Thanks Vivek 🙂