Re: Threat vector of running a service using a domain account

["Ali, Saqib" <docbook.xml () gmail com>]

> If a server does cache these creditonals then these can be attacked independant of the AD and its underlying security 
> controls.


If a service uses domain credential, do those credentials get cached?
I thought only interactive logon credentials are cached.

saqib
http://security-basics.blogspot.com/