One of my task this week was to identify active service accounts and where they are touching. During this process I discovered an odd reading.
Our service account for LANDesk is showing up as an "Interactive" connection type on several servers.
Microsoft Defines LogonType 2 as : "Intended for users who are interactively using the machine, such as a user being logged on by a terminal server, remote shell, or similar process."
What LANDesk feature would use this type connection, and run for 2days? I have already verified on 2 of the servers the account was not logged into the server from the console.
Did I completely miss the boat?