What is a one sentence summary of your feature request?
Implement a comprehensive Service Account Monitoring tab that automatically discovers, classifies, and provides actionable insights into Active Directory service account
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
The service accounts tab should provide me with the following information per service account
Presence of SPNs
Password age and rotation status.
Use of “Password never expires” or “Does not require pre-auth” flags.
Group memberships
Logon patterns, identifying unexpected interactive logins or logons from abnormal IPs.
Kerberos delegation settings (unconstrained vs. constrained).
Inactivity detection (flagging dormant service accounts).
How do you currently solve the challenges you have by not having this feature?
Currently we have to manually investigate each service account.