acc05

acc-05-service-logon-accounts (Enabled)

Checks all services to ensure no user accounts are assigned. If specific application service accounts are required then they should be domain level accounts (not local) and restricted from interactice access by policy.

---

Input Values

• IgnoreTheseUsers - "LIST" - Known user or group accounts to ignore

Example

IgnoreTheseUsers = @('NT AUTHORITY\\NetworkService', 'NT AUTHORITY\\LocalService', 'LocalSystem')

Input Descriptions

• None

---

Result And Messages

• PASS
  No services found running under a local accounts

• WARNING

• FAIL
  One or more services was found to be running under local accounts

• MANUAL

• NA

---

Applies To

• All Servers

---

Required Functions

• None