Q. How do I create and use Virtual Accounts in Windows 7 and Windows Server 2008 R2?

A. There's no management or creation of Virtual Accounts, you just use them by configuring the service to use the account "NT SERVICE\<service name>" with no password set. This setting is in the Log On tab of the service properties, which is accessed through services.msc. There are no other actions required. Like the Network Service account, there's no password management required and the passwords are reset automatically.

When you enter the account name for the logon, the service name must be the true service name and not the service description. Look at the General tab of the service for the service name and you must type that after NT SERVICE\, as shown here.

Click to expand.

• Q. What's a virtual account?
• New Active Directory Features in Windows Server 2008 R2
• Determining Which Service Logon Account to Use
• Understanding Windows Service Hardening