Skip to content

Commit 1f1b00c

Browse files
authored
Update service-accounts-computer.md
1 parent 521278d commit 1f1b00c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/active-directory/fundamentals/service-accounts-computer.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ms.collection: M365-identity-device-management
1717

1818
# Secure on-premises computer accounts with Active Directory
1919

20-
A computer account, or LocalSystem account, is highly privileged with access to almost all resources on the local computer. The account is not associated with signed-on user accounts. Services run as LocalSystem access network resources by presenting the computer credentials to remote servers in the format `<domain_name>\\<computer_name>$`. The computer account predefined name is `NT AUTHORITY\SYSTEM`. You can start a service and provide security context for that service.
20+
A computer account, or LocalSystem account, is highly privileged with access to almost all resources on the local computer. The account isn't associated with signed-on user accounts. Services run as LocalSystem access network resources by presenting the computer credentials to remote servers in the format `<domain_name>\\<computer_name>$`. The computer account predefined name is `NT AUTHORITY\SYSTEM`. You can start a service and provide security context for that service.
2121

2222
![Screenshot of a list of local services on a computer account.](./media/securing-service-accounts/secure-computer-accounts-image-1.png)
2323

@@ -26,7 +26,7 @@ A computer account, or LocalSystem account, is highly privileged with access to
2626
A computer account has the following benefits:
2727

2828
* **Unrestricted local access** - the computer account provides complete access to the machine's local resources
29-
* **Automatic password management** - removes the need for manually-changed passwords. The account is a member of Active Directory, and its password is changed automatically. With a computer account there is no need to register the service principal name.
29+
* **Automatic password management** - removes the need for manually changed passwords. The account is a member of Active Directory, and its password is changed automatically. With a computer account, there's no need to register the service principal name.
3030
* **Limited access rights off-machine** - the default access-control list in Active Directory Domain Services (AD DS) permits minimal access to computer accounts. During access by an unauthorized user, the service has limited access to network resources.
3131

3232
## Computer account security-posture assessment

0 commit comments

Comments
 (0)