How to create a service account in ad?

Creating a service account is quite simple. It is basically a normal user account, but with some special settings for non-human use.

First, open ‘Active Directory Users and Computers’. It is a good practice to create a dedicated OU, maybe named 'Service Accounts', to keep everything organized.

In that OU, right-click and choose New > User. Give it a descriptive name, like 'svc_sql' or 'svc_backup'. When you set the password, make it very strong. The most important step is to check the boxes for ‘User cannot change password’ and ‘Password never expires’.

Also, put a clear description of what the service account is for. Finally, remember to only grant it the minimum permissions needed for its task.