Windows account types
- Service account: These accounts are used to run background services and are assigned specific permissions. They are not used to log in to the system but may be used remotely. Domain-joined computers may have additional service accounts assigned to enable central administration.
- Local user account: By default, at least one local user account is created to run as the local administrator when first configuring the operating system. Depending on how Windows is installed, this account may be a generic account, such as an administrator, or it could be named after the first user who completes the first-time run wizard and chooses not to register a Microsoft account. These accounts are governed by the local password policies, which can be configured via Group Policy or a device/application management service such as Microsoft Intune.