[Documentation] Run Couchbase on Windows Server as Service using Windows Service Account or Virtual Account

Request

Provide documentation / recommendation to run Couchbase Server on Windows environment using Windows Service Account / Virtual Account for enhanced security and improved system privileges management.

Background

Couchbase Server installed on Windows Server should run as Windows Service Account or Virtual Account for enhance security and resource privileges management.

Managed service accounts and virtual accounts were introduced in Windows 2008 and Windows 7 to enhance the service isolation and manageability of network applications

If Couchbase servers / computers joined to the AD, user should setup Couchbase Service using Windows Service account. Service accounts are "managed domain accounts" that provide the following features to simplify service administration:

Benefit to run Couchbase Server using Windows Service Account

• Automatic password management.
• Simplified SPN management, including delegation of management to other administrators. Additional automatic SPN management is available at the Windows Server 2008 R2 domain functional level.
• Pre-configured with network and system resources privilege for network application

If the servers / computers are not joined to the AD, user should setup Couchbase Service using Windows Virtual account. Virtual accounts in Windows Server are "managed local accounts" that provide the following features to simplify service administration:*

• No password management is required.
• The ability to access the network with a computer identity in a domain environment.

Reference:

https://technet.microsoft.com/en-us/library/hh831451(v=ws.11).aspx