Diagram
A decision tree that branches on the number of servers, application support for managed accounts, and whether network access is required, leading to a choice among gMSAs, sMSAs, and domain or local user accounts.
Evaluating Security and Management Requirements
When deciding which account type to use, ask key questions. How many servers will run this service? If more than one, gMSAs are best. Does the service support managed service accounts? If not, use a domain user account. How often can administrators update passwords? Managed accounts handle this automatically. What permissions does the service actually need? Always assign only the minimum required access.
Domain 3 of 5
9 practice questions
Practice this DomainLast updated