other

Group Managed Service Accounts

An Active Directory account type whose password is generated and rotated by domain controllers, intended for services that run across several hosts without an administrator handling the credential.

Known aliases

gMSA
Group Managed Service Account

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Defender for Identity scores dormant AD accounts against a 90-day logon threshold

Microsoft's accounts posture assessment lists every Active Directory user account with no logon in the past 90 days and refreshes the score every 24 hours. Service accounts are excluded from that list.

Publishers:docs.microsoft.com

Reality

Evidence72
Adoption: Insufficient
Hype gap+12
Incentives62
Confidence66