Managed Service Accounts
Applies To: Windows 7, Windows Server 2008 R2
Two new types of service accounts are available in Windows Server 2008 R2 and Windows 7—the managed service account and the virtual account. The managed service account is designed to provide crucial applications such as Exchange Server and IIS with the isolation of their own domain accounts, while eliminating the need for an administrator to manually administer the service principal name (SPN) and credentials for these accounts. Virtual accounts in Windows Server 2008 R2 and Windows 7 are "managed local accounts" that can use a computer's credentials to access network resources.
This FAQ provides answers to common questions about managed service accounts.
Provides an overview of service accounts in Windows Server 2008 R2 and Windows 7.
Provides detailed information about how to set up and administer managed service accounts and virtual accounts on computers running Windows Server 2008 R2 and Windows 7.
KB 2494158: “Managed service account authentication fails after its password is changed in Windows 7 or in Windows Server 2008 R2”
KB 978836: “You cannot create or delete managed service accounts in a perimeter network in Windows 7 or in Windows Server 2008 R2”