Questions tagged [service-account]
The service-account tag has no usage guidance.
30
questions
1
vote
1
answer
79
views
Why use access token for Google Artifact Registry access?
Applications using a Google service account can use that service account's key (a long-lived credential) to obtain a short-lived access token for Google Artifact Registry and documentation strongly ...
- 113
0
votes
1
answer
128
views
What is it called when you only use a user account for a specific task in your OS?
I've noticed that people don't use a user account for a specific task;
I keep thinking the concept is called a "service account"
But it causes a lot of issues surrounding security; for ...
- 1,441
0
votes
0
answers
418
views
What are security risks of a domain user accounts with denied interactive logon?
When I create domain user account with denied interactive logon, what are real security risks when hacker gets the password?
http://paulasitblog.blogspot.com/2017/01/deny-interactive-logon-for-service....
0
votes
2
answers
2k
views
Windows directory that is only accessible by SYSTEM user
I am developing a .NET Windows Service using C# that needs to download an executable file and run it.
I need the Windows Service to run with SYSTEM privileges in order to allow it to install software ...
- 3
1
vote
0
answers
445
views
How should I store a password used by a service written in .NET
I have a Windows service that accesses a database connection. Since users rarely use Windows authentication, I encrypt the connection string. For development I have the password hard-coded, but I know ...
- 11
0
votes
1
answer
6k
views
Are NT Authority account users is safe?
I have an alert for monitoring windows server logon success (event ID 4624) and already whitelisting all the authorized users in the alert rule but after a while, there is some alert showed up using ...
- 13
0
votes
1
answer
506
views
Are SSH certificates more secure for service accounts?
I'm considering how to deploy a service that needs SSH access to many important boxes in my infrastructure. Rather than store a long-lived SSH private key in a key store that the service could request,...
- 401
1
vote
1
answer
225
views
Amazon S3 policies: CORS or Service Accounts?
I have a question about accessing buckets on AWS S3. Let's suppose we have a bucket that has to have public read access by everyone and only my API has to be able to PUT and DELETE items from bucket. ...
- 69
1
vote
0
answers
435
views
gpg won't find public key if not in interactive session
How to make imported public key available after logging off?
I have a Powershell process that encrypts the file (recipient was masked):
Start-Process "gpg.exe" -ArgumentList "--batch --yes --always-...
- 11
0
votes
3
answers
2k
views
Service Account Best Practices [closed]
I am getting a presentation together for a topic I am not SUPER knowledgeable in.
I am an admin within a nameless system, and of the opinion that a service account should be created for each ...
- 103
1
vote
2
answers
253
views
IIS Application - service account permissions
My company is looking to install a 3rd party application on our infrastructure and this application will be installed on an IIS Server with a connection to a SQL server. They require an AD service ...
- 237
5
votes
2
answers
4k
views
Does PCI-DSS password guidance apply to service accounts?
A service account is a user account created for the sole purpose of running an application. For example, an online banking web site may have a single service account under which the code runs.
...
- 9,331
1
vote
1
answer
3k
views
IIS - giving service accounts admin rights?
I'm looking at a application running on IIS which requires service account(s) to run some services/software, however the service account requires LOCAL ADMIN access which is against policy.
Are there ...
- 237
0
votes
2
answers
137
views
Authentication of an indefinite number of technicians in an offline scenario
Are there any possibilities to authenticate a changing number of (service) technicians towards a device without an internet / network connection? With the possibility to revoke the access later?
Edit:...
- 103
7
votes
2
answers
23k
views
Recover the password of a Windows service user login account
When setting up a Windows service, one specifies a user account to use for authentication, as well as the password for that user. In their guidelines for user account selection, Microsoft states that ...
- 173