Disabling interacting logon for service accounts

ankurj.hazarika

Team,

Why is it important to disable interactive logons for service accounts in a windows environment? Please help me understand.

Thanks.
Ankur

OM602

Because you don't want the service account to be able to log in interactively to systems, and start any other applications than the one that you intented to.

For instance you don't want the acount SVC_SQL to start anything else than SQL service(and you probably shouldn't have descriptive service account names, but that's overdoing it IMO)

ankurj.hazarika

Thanks a lot, man! Really helpful!