Skip to content

Commit f70779e

Browse files
authored
Update service-accounts-govern-on-premises.md
1 parent a3de9d0 commit f70779e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/active-directory/fundamentals/service-accounts-govern-on-premises.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ When you create service accounts, consider the information in the following tabl
4646
| Scope| Define the scope, and anticipate usage duration|
4747
| Purpose| Create service accounts for one purpose |
4848
| Permissions | Apply the principle of least permission:<li>Don't assign permissions to built-in groups, such as administrators<li>Remove local machine permissions, where feasible<li>Tailor access, and use AD delegation for directory access<li>Use granular access permissions<li>Set account expiration and location restrictions on user-based service accounts |
49-
| Monitor and audit use| Monitor sign-in data, and ensure it matches the intended usage. Set alerts for anomalous usage. |
49+
| Monitor and audit use| <li>Monitor sign-in data, and ensure it matches the intended usage <li>Set alerts for anomalous usage |
5050

5151
### User account restrictions
5252

@@ -167,8 +167,8 @@ To deprovision:
167167
5. Create a business policy that determines the amount of time that accounts are disabled.
168168
6. Delete the service account.
169169

170-
* **MSAs** - See, [Uninstall the account](/powershell/module/activedirectory/uninstall-adserviceaccount?view=winserver2012-ps&preserve-view=true). Use PowerShell, or delete it manually from the managed service account container.
171-
* **Computer or user accounts** - Manually delete the account from Active Directory.
170+
* MSAs - see, [Uninstall the account](/powershell/module/activedirectory/uninstall-adserviceaccount?view=winserver2012-ps&preserve-view=true). Use PowerShell, or delete it manually from the managed service account container.
171+
* Computer or user accounts - manually delete the account from Active Directory
172172

173173
## Next steps
174174

0 commit comments

Comments
 (0)