System Center 2012 Configuration Manager Unleashed

Securing ConfigMgr Accounts

ConfigMgr uses a variety of accounts as part of its operating framework. Many of these accounts are required in specific situations, such as accounts to support clients or site systems in untrusted domains. Other accounts are required to support only specific services, such as out of band management. You should use only the accounts required by your environment or to support specific ConfigMgr features you use. Follow best practices for configuring and managing accounts. Here are some principles for managing ConfigMgr accounts:

• Use strong passwords and change those passwords regularly.

• Enable the Password never expires and User cannot change password options for Windows and Active Directory accounts used by ConfigMgr. ...