Let me reboot my question on SQL Server virtual accounts permissions
The (same) MSDN article on the same version 2012 of SQL Server "Configure Windows Service Accounts and Permissions" states in "File System Permissions Related to Unusual Disk Locations" section:
"Virtual accounts cannot be authenticated to a remote location. All virtual accounts use the permission of machine account. Provision the machine account in the format
If "virtual accounts cannot be authenticated to a remote location" then why:
- to use permissions of of a machine account and
- in the the format of domain account?
The same article, in "New Account Types Available with Windows 7 and Windows Server 2008 R2" section contains:
" Virtual Accounts
Virtual accounts in Windows Server 2008 R2 and Windows 7 are managed local accounts that provide the following features to simplify service administration. The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is used for the service accounts during SQL Server setup on Windows
Server 2008 R2or
Windows 7, a virtual account using the instance name as the service name is used, in the format
NT SERVICE\<SERVICENAME>. Services that run as virtual accounts access network resources by using the credentials of the computer account in the format
How should I better understand accessing the network without authentication ?