A service account is an account in a security database, in whose security context at least one service program (i.e., an unattended process) is run.

A subscriber is the operating system component which authenticates to the security database, in order to establish a security context for a process which it wishes to run.

For example the service may be a DNS name-to-IP resolver, the subscriber may be the Windows Service Control Manager (SCM), the security database may be the Windows SAM Account database or Active Directory and the service account may be an ID called DNSUSER.

Return to Identity Management Concepts