Understand Windows Server service accounts

Advanced
Administrator
Windows Server

Service accounts provide the security context that Windows services, scheduled tasks, and applications use to reach local and network resources. Learn what service accounts are, the problems they cause, and how to choose and configure the correct local or managed account type on Windows Server 2025.

Learning objectives

By the end of this module, you're able to:

  • Describe the purpose of Windows Server service accounts and the common problems associated with them.
  • Identify and configure the local service account types.
  • Compare the managed service account types (sMSA, gMSA, and dMSA) and select the correct one for a workload.

Prerequisites

  • Experience administering Windows Server 2025 and Active Directory Domain Services (AD DS).
  • Familiarity with Windows security principals, security identifiers (SIDs), and access tokens.
  • Working knowledge of Kerberos authentication and service principal names (SPNs).
  • Access to a Windows Server 2025 AD DS environment and Windows PowerShell for the procedures.