Re: Threat vector of running a service using a domain account



If a server does cache these creditonals then these can be attacked independant of the AD and its underlying security controls.


If a service uses domain credential, do those credentials get cached?
I thought only interactive logon credentials are cached.

saqib
http://security-basics.blogspot.com/