Microsoft® Lync Server 2010 Unleashed

Securing Service Accounts

Most Microsoft applications use service accounts, and Lync Server is no exception. Although some applications use service accounts running as System or Network Service, many IT groups prefer to use named accounts for services. This often results in simplified management of permissions because accounts can use descriptive names and it makes it easier to apply local policies to these service accounts. It also enables you to create a single domain-based service account to use across multiple servers. This also makes it easier to ensure that rights are consistent across multiple servers in the same deployment. Regardless of the methodology used, it is worthwhile to put some effort toward securing the service accounts.