Managed Service Accounts

Applies To: Windows 7, Windows Server 2008 R2

Two new types of service accounts are available in Windows Server 2008 R2 and Windows 7—the managed service account and the virtual account. The managed service account is designed to provide crucial applications such as Exchange Server and IIS with the isolation of their own domain accounts, while eliminating the need for an administrator to manually administer the service principal name (SPN) and credentials for these accounts. Virtual accounts in Windows Server 2008 R2 and Windows 7 are "managed local accounts" that can use a computer's credentials to access network resources.

Product Evaluation

• Managed Service Accounts Frequently Asked Questions (FAQ)

  This FAQ provides answers to common questions about managed service accounts.

• What's New in Service Accounts

  Provides an overview of service accounts in Windows Server 2008 R2 and Windows 7.

Getting Started

• Service Accounts Step-by-Step Guide

  Provides detailed information about how to set up and administer managed service accounts and virtual accounts on computers running Windows Server 2008 R2 and Windows 7.

Troubleshooting

• KB 2494158: “Managed service account authentication fails after its password is changed in Windows 7 or in Windows Server 2008 R2”

• KB 978836: “You cannot create or delete managed service accounts in a perimeter network in Windows 7 or in Windows Server 2008 R2”