Let me reboot my question on SQL Server virtual accounts permissions
The (same) MSDN article on the same version 2012 of SQL Server "Configure Windows Service Accounts and Permissions" states:
- in "File System Permissions Related to Unusual Disk Locations" section: "Virtual accounts cannot be authenticated to a remote location. All virtual accounts use the permission of machine account. Provision the machine account in the format \$."
If "virtual accounts cannot be authenticated to a remote location" then why:
- to use permissions of of a machine account and
- in the the format of domain account?
The same article, in "New Account Types Available with Windows 7 and Windows Server 2008 R2" section contains:
" Virtual Accounts
Virtual accounts in Windows Server 2008 R2 and Windows 7 are managed local accounts that provide the following features to simplify service administration. The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is used for the service accounts during SQL Server setup on Windows
Server 2008 R2or
Windows 7, a virtual account using the instance name as the service name is used, in the format
NT SERVICE\<SERVICENAME>. Services that run as virtual accounts access network resources by using the credentials of the computer account in the format
How should I better understand accessing the network without authentication ?