Questions tagged [service-accounts]

91 questions
3
votes
3 answers

Can TFS 2010 be configured with managed service accounts?

I'm trying to deploy TFS 2010 in a sandbox environment, and I created a managed service account for TFS. However, I seem to be unable to configure it in the Advanced Configuration Wizard. The error reported when I click 'test' is "TFS254021: The…
2
votes
1 answer

SPN generation for multiple service account on a Web server

I am trying to achieve Azure SSO in my organisation. I have a web server hosting multiple websites and web application under those sites. Users access them in below fashion https:// < SiteName > / < ApplicationName > / We have a service account…
2
votes
1 answer

How to provide access to only one instance to users in Google Compute Engine?

I'm trying to find a solution to provide an external worker access to an instance in our project but not all resources. I have done some research and found two methods on how to do this. First would be to provide the contractor a private key to ssh…
2
votes
0 answers

Behaviour of environment variables in HKCU\Volatile Environment reg key

I have a .bat script that runs for every user at login (copies Oracle Java Exception Sites). It copies a file to: %userprofile%\appdata\LocalLow\Sun\Java\Deployment\security\exception.sites Unfortunately, it works a little too well. Sometimes it…
2
votes
1 answer

Who or what needs user "operator" in OSX

Our OSX server 4 Yosemity 10.10 is bound to AD where an unrelated user "operator" exists. Reportedly the OSX server tries to use account "operator" without the proper password, and this action locks the valid AD account "operator". What service in…
2
votes
1 answer

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account credentials, they could then use them to log…
jhaar
  • 181
  • 1
  • 1
  • 5
2
votes
2 answers

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its authentication against the enterprise Active…
Andre
  • 1,341
  • 4
  • 19
  • 34
2
votes
0 answers

Group Managed Service Account access to network share on remote server

We've got a service running using a Group Managed Service Account on a Windows Server 2016 host (HostA). We're extending the functionality of this service so that it runs an R script which needs to access a file share \\HostB\Data on another Windows…
2
votes
1 answer

VM instance down suddenly and fail to restart, showing 'serviceAccount' was not found

I have a Django server running in VM instance, the server working fine before this, but this morning the server was unable to access. So I tried to SSH into the VM instance, but it took a long time and shows an error that SSH can't be connected. I…
1
vote
1 answer

Windows - Restrict ability to run application to one service account

I've been asked to write a script that enters information from one application into another - and I've done it using a combination of Python, Selenium and Firefox (it's a temporary measure before a project to actually properly integrate the two…
1
vote
0 answers

vCenter Log on as a Service Concerns

I was installing VMWare vCenter Server 6.0 on Windows Server 2012 R2 when I came across vCenter Server Service Account feature. I can use a local system account or specify a service account on my domain. After doing some googling, I have found that…
1
vote
1 answer

Why Apache can run a command and root cannot?

I have a server-side script executed by Apache running as www-data. The script runs fine on the server when called remotely (http://example.com/script.sh). I am trying to run the same script on the same server as root, impersonificating www-data. It…
WoJ
  • 3,607
  • 9
  • 49
  • 79
1
vote
1 answer

AIX non-expiring account lock - who is locking it?

I have a non-expiring service account on an AIX server which I use to connect to my database. Every couple of weeks some user or task tries to connect to the account with the wrong password, and the account gets locked. This causes me days of delay…
Payson
  • 11
  • 2
1
vote
1 answer

How can I replace a local TFS service account with a domain TFS service account to perform a migration?

I changed the service account used by Team Foundation Server from a local account HOSTNAME\local_tfs_service_account to a domain account DOMAIN\domain_tfs_service_account, by directly clicking on the "Change Account" link in the Application Tier…
Zesty
  • 153
  • 7
1
vote
1 answer

Minimum level of access required for service account to run a scheduled task on server?

We have 2 domain administrator accounts in Active Directory: "Administrator" and "Robocopy". Robocopy is a service account associated with a scheduled task which executes a batch file- which runs Robocopy (on our SBS 2003 file server/domain…