Service Admin Account

[miloann2002]

I would like to know what are the industry practices for those service IDs
with administrator privileges. We have a number of these type of IDs and
they are set to never expired. These IDs are those used to backup and other
scheduled automated jobs. Is this appropriate? If not, should they follow
the regular password administration policy?

 

[Mark-Allen Perry]

Depends on company policy where I've worked. There are several service accounts on both the Unix and Windows servers that do not expire. However, they also have strong encryption and are heavily audited. I don't see a big problem with this due to the business requirements.

Others may have different views.

--

Always try the MS KB first before posting.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
And the answer could have already been posted, so try searching this and other newsgroups first.
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

I would like to know what are the industry practices for those service IDs
with administrator privileges. We have a number of these type of IDs and
they are set to never expired. These IDs are those used to backup and other
scheduled automated jobs. Is this appropriate? If not, should they follow
the regular password administration policy?