Skip to content

Commit 6463fec

Browse files
committed
Learn Editor: Update remove-inactive-service-account.md
1 parent 9a1afcc commit 6463fec

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

ATPDocs/remove-inactive-service-account.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ ms.topic: how-to
66
#customer intent: As a security administrator, I want to improve security posture in my organization by removing inactive service accounts
77
---
88

9-
# Security Assessment: Remove Inactive Service Accounts (Preview)
9+
# Security Assessment: Remove Stale Service Accounts (Preview)
1010

11-
This recommendation lists Active Directory service accounts detected as inactive (stale) within the past 180 days.
11+
This recommendation lists Active Directory service accounts detected as stale within the past 90 days.
1212

13-
## Why do inactive service accounts pose a risk?
13+
## Why do stale service accounts pose a risk?
1414

15-
Unused service accounts create significant security risks, as some of them can carry elevated privileges. If attackers gain access, the result can be substantial damage. Dormant service accounts might retain high or legacy permissions. When compromised, they provide attackers with discreet entry points into critical systems, granting far more access than a standard user account.
15+
Unused service accounts create significant security risks, as some of them can carry elevated privileges. If attackers gain access, the result can be substantial damage. Stale service accounts might retain high or legacy permissions. When compromised, they provide attackers with discreet entry points into critical systems, granting far more access than a standard user account.
1616

1717
This exposure creates several risks:
1818

@@ -25,10 +25,9 @@ This exposure creates several risks:
2525

2626
To use this security assessment effectively, follow these steps:
2727

28-
1. Review the recommended action at [https://security.microsoft.com/securescore?viewid=actions ](https://security.microsoft.com/securescore?viewid=actions ) for Remove inactive service account.
29-
1. Review the list of exposed entities to discover which of your service account is inactive.
28+
1. Review the recommended action at [https://security.microsoft.com/securescore?viewid=actions ](https://security.microsoft.com/securescore?viewid=actions) for Remove stale service account.
3029

31-
:::image type="content" source="media/okta-integration/remove-inactive-service-accounts.png" alt-text="Screenshot that shows the recommendation action to remove inactive service accounts." lightbox="media/okta-integration/remove-inactive-service-accounts.png":::
30+
1. Review the list of exposed entities to discover which of your service accounts are stale and have not performed any login activity in the last 90 days.
3231

3332
1. Take appropriate actions on those entities by removing the service account. For example:
3433

0 commit comments

Comments
 (0)