---
title: Account Type Values
slug: kronpam-reference-guide-3-9-0/account-type-values
docTags: 
createdAt: 2026-10-09T09:08:34.980Z
---

The **User Type** column shows one of the following values for each discovered account:

| **Value**           | **Criteria**                                                                                                                         |
| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| **Local**           | The account is a local user on the server. It isn't bound to any Windows Service.                                                    |
| **Local, Service**  | The account is a local user on the server, and it's also defined in the StartName (Log On As) field of at least one Windows Service. |
| **Domain, Service** | The account is a domain account, and it's also defined in the StartName (Log On As) field of at least one Windows Service.           |

:::hint{type="info"}
Kron PAM doesn't list a standalone **Domain** value. A domain account appears in the list only if it runs a Windows Service; domain accounts that aren't bound to any service never appear.
:::

Kron PAM excludes the following objects from the **Newly Discovered Users** list:

- Built-in service accounts: NT AUTHORITY\SYSTEM, LocalService, NetworkService, and NT SERVICE\* (virtual service accounts).
- Well-known principals: INTERACTIVE, Authenticated Users, Everyone, and IUSR.
- Group objects, such as Domain Users and Domain Admins.
- Computer accounts (accounts ending with the $ sign).