Account Type Values
The User Type column shows one of the following values for each discovered account:
Value | Criteria |
|---|---|
Local | The account is a local user on the server. It isn't bound to any Windows Service. |
Local, Service | The account is a local user on the server, and it's also defined in the StartName (Log On As) field of at least one Windows Service. |
Domain, Service | The account is a domain account, and it's also defined in the StartName (Log On As) field of at least one Windows Service. |
Kron PAM doesn't list a standalone Domain value. A domain account appears in the list only if it runs a Windows Service; domain accounts that aren't bound to any service never appear.
Kron PAM excludes the following objects from the Newly Discovered Users list:
- Built-in service accounts: NT AUTHORITY\SYSTEM, LocalService, NetworkService, and NT SERVICE* (virtual service accounts).
- Well-known principals: INTERACTIVE, Authenticated Users, Everyone, and IUSR.
- Group objects, such as Domain Users and Domain Admins.
- Computer accounts (accounts ending with the $ sign).