{"id":105951,"date":"2026-01-19T15:29:07","date_gmt":"2026-01-19T14:29:07","guid":{"rendered":"https:\/\/mwtsolutions.eu\/?p=105951"},"modified":"2026-01-20T10:07:26","modified_gmt":"2026-01-20T09:07:26","slug":"co-jsou-servisni-ucty-v-manageengine-pam360","status":"publish","type":"post","link":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/","title":{"rendered":"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"105951\" class=\"elementor elementor-105951\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7759fe2 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"7759fe2\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9d308ad\" data-id=\"9d308ad\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5430aa2 elementor-widget elementor-widget-text-editor\" data-id=\"5430aa2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Pokud jste n\u011bkdy zkusili oto\u010dit (rotovat) heslo servisn\u00edho \u00fa\u010dtu a n\u00e1sledn\u011b v\u00e1m spadla polovina firemn\u00ed aplikace, u\u017e v\u00edte, jak to v praxi chod\u00ed: <strong>servisn\u00ed \u00fa\u010dty jsou z\u00e1rove\u0148 nepostradateln\u00e9 i k\u0159ehk\u00e9.<\/strong><\/p><p>Jsou nepostradateln\u00e9, proto\u017ee poh\u00e1n\u011bj\u00ed \u201eneviditelnou\u201c infrastrukturu \u2013 Windows slu\u017eby, pl\u00e1novan\u00e9 \u00falohy, IIS aplika\u010dn\u00ed pooly, integrace a automatizace, kter\u00e9 mus\u00ed fungovat i tehdy, kdy\u017e nen\u00ed nikdo p\u0159ihl\u00e1\u0161en\u00fd. Jsou k\u0159ehk\u00e9, proto\u017ee b\u00fdvaj\u00ed p\u0159ep\u0159evilegovan\u00e9, dlouhodob\u011b pou\u017e\u00edvan\u00e9, sd\u00edlen\u00e9 nap\u0159\u00ed\u010d syst\u00e9my a typicky je t\u011b\u017ek\u00e9 je bezpe\u010dn\u011b rotovat bez v\u00fdpadk\u016f.<\/p><p>V <a href=\"https:\/\/i.mwtsolutions.eu\/cs\/produkty\/security-it\/pam360\/\">PAM360<\/a> se pojem \u201eservice account\u201c v dokumentaci i praxi pou\u017e\u00edv\u00e1 ve <strong>t\u0159ech souvisej\u00edc\u00edch v\u00fdznamech<\/strong> \u2013 a v\u011bt\u0161ina nejasnost\u00ed vznik\u00e1 t\u00edm, \u017ee se tyto v\u00fdznamy m\u00edchaj\u00ed:<\/p><ol><li><strong>Servisn\u00ed \u00fa\u010dty, kter\u00e9 v PAM360 spravujete<\/strong> (ukl\u00e1dan\u00e9 p\u0159ihla\u0161ovac\u00ed \u00fadaje, governance, rotace a synchronizace z\u00e1vislost\u00ed)<\/li><li><strong>Servisn\u00ed \u00fa\u010det, pod kter\u00fdm b\u011b\u017e\u00ed samotn\u00e9 PAM360<\/strong> (pou\u017e\u00edv\u00e1 se pro vzd\u00e1len\u00e9 operace, nap\u0159. reset hesel)<\/li><li><strong>Cloudov\u00fd \u201eservice account\u201c pro API operace<\/strong> (nap\u0159. Google Workspace service account + kl\u00ed\u010dov\u00fd soubor)<\/li><\/ol><p>Poj\u010fme si to rozebrat p\u0159ehledn\u011b a pak si uk\u00e1zat, jak PAM360 dok\u00e1\u017ee naj\u00edt z\u00e1vislosti a bezpe\u010dn\u011b propagovat zm\u011bny hesel.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea075cc elementor-widget elementor-widget-heading\" data-id=\"ea075cc\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">1. Servisn\u00ed \u00fa\u010dty \u2013 jednodu\u0161e vysv\u011btleno <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-73605db elementor-widget elementor-widget-text-editor\" data-id=\"73605db\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Servisn\u00ed \u00fa\u010det je <strong>nelidsk\u00fd \u00fa\u010det<\/strong> pou\u017e\u00edvan\u00fd aplikacemi, slu\u017ebami, skripty a pl\u00e1novan\u00fdmi \u00falohami k autentizaci a vykon\u00e1v\u00e1n\u00ed pr\u00e1ce. \u010casto pot\u0159ebuje vy\u0161\u0161\u00ed opr\u00e1vn\u011bn\u00ed, proto\u017ee slu\u017eba, kterou provozuje, je ze sv\u00e9 podstaty privilegovan\u00e1 (z\u00e1lohov\u00e1n\u00ed, monitoring, synchronizace adres\u00e1\u0159\u016f, datab\u00e1zov\u00e9 joby apod.). ManageEngine popisuje service accounts jako privilegovan\u00e9 dom\u00e9nov\u00e9 \u00fa\u010dty pou\u017e\u00edvan\u00e9 aplikacemi\/slu\u017ebami a pl\u00e1novan\u00fdmi \u00falohami pro interakci s OS a dal\u0161\u00edmi komponentami.<\/p><p>V praxi to vypad\u00e1 takto:<\/p><ul><li>Windows slu\u017eba b\u011b\u017e\u00ed pod DOMAIN\\svc_app<\/li><li>No\u010dn\u00ed pl\u00e1novan\u00e1 \u00faloha b\u011b\u017e\u00ed pod DOMAIN\\svc_batch<\/li><li>IIS AppPool identity je nastaven\u00e1 na DOMAIN\\svc_web<\/li><li>V web.config je ulo\u017een\u00e9 DB heslo, kter\u00e9 aplikace pou\u017e\u00edv\u00e1<\/li><li>V cloudu existuje identita (nap\u0159. Google Workspace \u201eservice account\u201c) pro vol\u00e1n\u00ed admin API<\/li><\/ul><p><a href=\"https:\/\/i.mwtsolutions.eu\/cs\/produkty\/security-it\/pam360\/\">PAM360<\/a> je navr\u017eeno tak, aby z t\u011bchto rozpt\u00fdlen\u00fdch a rizikov\u00fdch identit ud\u011blalo <strong>\u0159\u00edzen\u00e9 \u00fa\u010dty<\/strong> s governance, rotac\u00ed a auditn\u00ed stopou.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a9f11f7 elementor-widget elementor-widget-heading\" data-id=\"a9f11f7\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">2. \u201eServisn\u00ed \u00fa\u010dty\u201c v PAM360: 3 v\u00fdznamy, kter\u00e9 mus\u00edte odd\u011blit\u00a0<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-364581e elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"364581e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0274e9f\" data-id=\"0274e9f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-92e7059 elementor-widget elementor-widget-text-editor\" data-id=\"92e7059\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>A) Servisn\u00ed \u00fa\u010dty, kter\u00e9 spravujete (\u00fa\u010dty, kter\u00e9 n\u011bco \u201eb\u011b\u017e\u00ed\u201c)<\/strong><\/p><p>\u00a0<\/p><p>PAM360 podporuje discovery privilegovan\u00fdch \u00fa\u010dt\u016f a zahrnuje tak\u00e9 discovery <strong>service accounts spojen\u00fdch s Windows a Linux (SSH only) dom\u00e9nov\u00fdmi \u00fa\u010dty<\/strong>, spolu s discovery za\u0159\u00edzen\u00ed jako Windows, Linux, VMware a s\u00ed\u0165ov\u00e9 prvky.<\/p><p>Pro Windows m\u00e1 PAM360 speci\u00e1ln\u00ed funkce, kter\u00e9 po zm\u011bn\u011b dom\u00e9nov\u00e9ho hesla zajist\u00ed synchronizaci \u201ez\u00e1visl\u00fdch pou\u017eit\u00ed\u201c tohoto \u00fa\u010dtu:<\/p><ul><li><strong>Windows Service Accounts Password Reset<\/strong> (Windows slu\u017eby + pl\u00e1novan\u00e9 \u00falohy vyu\u017e\u00edvaj\u00edc\u00ed dom\u00e9nov\u00fd \u00fa\u010det)<\/li><li><strong>Windows Scheduled Tasks Password Reset<\/strong> (workflow zam\u011b\u0159en\u00fd na \u00falohy; m\u00e1 specifick\u00e1 omezen\u00ed)<\/li><li><strong>IIS AppPool account password reset<\/strong> (aktualizuje identitu aplika\u010dn\u00edho poolu po zm\u011bn\u011b hesla)<\/li><li><strong>IIS web.config credential discovery\/reset<\/strong> (najde weby, kde je \u00fa\u010det v connection stringu, a po resetu aktualizuje heslo)<\/li><\/ul><p>Tohle jsou \u201espravovan\u00e9\u201c servisn\u00ed \u00fa\u010dty v tom PAM smyslu: PAM360 heslo nejen ulo\u017e\u00ed\/rotuje, ale tak\u00e9 sleduje, kde se pou\u017e\u00edv\u00e1, a pom\u00e1h\u00e1 zm\u011bnu propagovat.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0587119 elementor-widget elementor-widget-text-editor\" data-id=\"0587119\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>B) Servisn\u00ed \u00fa\u010det serveru PAM360 (identita, kterou PAM360 pou\u017e\u00edv\u00e1 k prov\u00e1d\u011bn\u00ed operac\u00ed)<\/strong><\/p><p>Pokud provozujete PAM360 na Windows, b\u011b\u017e\u00ed jako Windows slu\u017eba. Dokumentace k remote password reset uv\u00e1d\u00ed, \u017ee <strong>defaultn\u011b<\/strong> PAM360 resetuje hesla Windows lok\u00e1ln\u00edch \u00fa\u010dt\u016f pomoc\u00ed <strong>servisn\u00edho \u00fa\u010dtu, pod kter\u00fdm b\u011b\u017e\u00ed PAM360 slu\u017eba,<\/strong> a pokud je tento \u00fa\u010det privilegovan\u00fd (Domain Admin \/ lok\u00e1ln\u00ed admin na c\u00edlech), dok\u00e1\u017ee reset prov\u00e9st i bez znalosti p\u016fvodn\u00edho hesla.<\/p><p>FAQ z\u00e1rove\u0148 zmi\u0148uje, \u017ee pro discovery a funkce password reset pot\u0159ebujete <strong>service account nebo gMSA<\/strong> s Domain Admin pr\u00e1vy nebo lok\u00e1ln\u00edmi admin pr\u00e1vy na PAM360 serveru a spravovan\u00fdch syst\u00e9mech.<\/p><p>Tohle je z\u00e1sadn\u00ed architektonick\u00fd bod:<\/p><ul><li><strong>Spravovan\u00e9 identity<\/strong> = hesla, kter\u00e1 ukl\u00e1d\u00e1te\/rotujete (servisn\u00ed \u00fa\u010dty ve va\u0161\u00ed infrastruktu\u0159e)<\/li><li><strong>Provozn\u00ed identita<\/strong> = \u00fa\u010det, kter\u00fdm se PAM360 p\u0159ipojuje a prov\u00e1d\u00ed discovery\/reset<\/li><\/ul><p>Nen\u00ed to tot\u00e9\u017e \u2013 ale v dokumentaci se pro oboj\u00ed \u010dasto pou\u017e\u00edv\u00e1 \u201eservice account\u201c.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1d77d7f elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"1d77d7f\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9a2010a\" data-id=\"9a2010a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bf53fc2 elementor-widget elementor-widget-text-editor\" data-id=\"bf53fc2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>C) Cloudov\u00fd \u201eservice account\u201c (API identita pro vzd\u00e1len\u00e9 resety)<\/strong><\/p><p>Pro reset hesel v Google Workspace pou\u017e\u00edv\u00e1 PAM360 <strong>Google Cloud service account<\/strong>. Od PAM360 build 7200 se reset hesel v Google Workspace d\u011bl\u00e1 p\u0159es <strong>service account key file<\/strong> (zm\u011bna na stran\u011b Google).<\/p><p>ManageEngine k tomu m\u00e1 samostatn\u00fd konfigura\u010dn\u00ed n\u00e1vod, kter\u00fd popisuje domain-wide delegation a povolen\u00ed Admin SDK API apod.<\/p><p>To je \u201eservice account\u201c ve smyslu cloudu: API principal, kter\u00fdm PAM360 vol\u00e1 administr\u00e1torsk\u00e9 funkce.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1031b4a elementor-widget elementor-widget-heading\" data-id=\"1031b4a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">3. Co PAM360 re\u00e1ln\u011b d\u011bl\u00e1 s Windows servisn\u00edmi \u00fa\u010dty\u00a0<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-570593b elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"570593b\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5016117\" data-id=\"5016117\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-75be64b elementor-widget elementor-widget-text-editor\" data-id=\"75be64b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b><span data-contrast=\"auto\">Z\u00e1kladn\u00ed\u00a0probl\u00e9m:\u00a0rotace\u00a0hesel\u00a0rozbije\u00a0z\u00e1vislosti<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">V\u00a0dom\u00e9n\u011b\u00a0m\u016f\u017ee\u00a0b\u00fdt\u00a0jeden\u00a0\u00fa\u010det\u00a0pou\u017eit\u00fd\u00a0pro:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Windows\u00a0slu\u017eby<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Pl\u00e1novan\u00e9\u00a0\u00falohy<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0AppPools<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">Aplikace,\u00a0kter\u00e9\u00a0maj\u00ed\u00a0heslo\u00a0ulo\u017een\u00e9\u00a0v\u00a0konfiguraci\u00a0(nap\u0159. connection string v IIS\u00a0web.config)<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><span data-contrast=\"auto\">Zm\u011bnit\u00a0dom\u00e9nov\u00e9\u00a0heslo\u00a0je\u00a0snadn\u00e9.\u00a0Aktualizovat\u00a0v\u0161echna\u00a0\u201em\u00edsta\u00a0pou\u017eit\u00ed\u201c\u00a0na\u00a0des\u00edtk\u00e1ch\u00a0server\u016f\u00a0je to, co\u00a0zp\u016fsobuje\u00a0v\u00fdpadky.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><b><span data-contrast=\"auto\">P\u0159\u00edstup\u00a0PAM360:\u00a0mapovat\u00a0z\u00e1vislosti\u00a0a\u00a0propagovat\u00a0zm\u011bny<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Funkce\u00a0Windows Service Account Password Reset\u00a0popisuje:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"6\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">U\u00a0dom\u00e9nov\u00e9ho\u00a0\u00fa\u010dtu, u\u00a0kter\u00e9ho\u00a0je reset\u00a0servisn\u00edho\u00a0\u00fa\u010dtu\u00a0povolen, PAM360\u00a0vyhled\u00e1\u00a0slu\u017eby,\u00a0kter\u00e9\u00a0pou\u017e\u00edvaj\u00ed\u00a0tento\u00a0\u00fa\u010det\u00a0jako\u00a0logon identity,\u00a0a\u00a0automaticky\u00a0provede\u00a0reset\u00a0p\u0159i\u00a0zm\u011bn\u011b\u00a0dom\u00e9nov\u00e9ho\u00a0hesla.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"6\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">M\u016f\u017ee\u00a0proj\u00edt\u00a0asociovan\u00e9\u00a0resource groups\u00a0a\u00a0aktualizovat\u00a0<\/span><b><span data-contrast=\"auto\">slu\u017eby\u00a0i\u00a0pl\u00e1novan\u00e9\u00a0\u00falohy<\/span><\/b><span data-contrast=\"auto\">,\u00a0pot\u00e9\u00a0slu\u017eby\u00a0dle\u00a0pot\u0159eby\u00a0restartovat.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><span data-contrast=\"auto\">Dokumentace\u00a0uv\u00e1d\u00ed\u00a0i\u00a0p\u0159edpoklady,\u00a0kter\u00e9\u00a0je\u00a0pot\u0159eba\u00a0br\u00e1t\u00a0v\u00e1\u017en\u011b:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">.NET Framework 4.5.2+<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Visual C++ 2015 redistributable<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">RPC a WMI\u00a0povoleno\u00a0na\u00a0c\u00edlov\u00fdch\u00a0serverech<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">PAM360\u00a0slu\u017eba\u00a0b\u011b\u017e\u00edc\u00ed\u00a0pod\u00a0dom\u00e9nov\u00fdm\u00a0admin\u00a0\u00fa\u010dtem\u00a0pro\u00a0tento\u00a0sc\u00e9n\u00e1\u0159<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><span data-contrast=\"auto\">Pro IIS:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">PAM360\u00a0identifikuje\u00a0IIS\u00a0AppPooly\u00a0b\u011b\u017e\u00edc\u00ed\u00a0pod\u00a0konkr\u00e9tn\u00edm\u00a0dom\u00e9nov\u00fdm\u00a0\u00fa\u010dtem\u00a0a\u00a0automaticky\u00a0po\u00a0resetu\u00a0aktualizuje\u00a0identitu\u00a0app\u00a0poolu.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Pro IIS\u00a0web.config\u00a0m\u016f\u017ee\u00a0PAM360\u00a0vylistovat\u00a0weby,\u00a0kde\u00a0je\u00a0\u00fa\u010det\u00a0v connection\u00a0stringu, a\u00a0n\u00e1sledn\u011b\u00a0aktualizovat\u00a0heslo\u00a0nap\u0159\u00ed\u010d\u00a0servery.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Timing\u00a0restartu\u00a0je\u00a0d\u016fle\u017eit\u00fd<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\"><br \/>I\u00a0kdy\u017e\u00a0se\u00a0heslo\u00a0spr\u00e1vn\u011b\u00a0prom\u00edtne,\u00a0slu\u017eba\u00a0m\u016f\u017ee\u00a0selhat,\u00a0pokud\u00a0se restart\u00a0provede\u00a0\u201ep\u0159\u00edli\u0161\u00a0rychle\u201c. PAM360\u00a0m\u00e1\u00a0v\u00a0nastaven\u00ed\u00a0mo\u017enost\u00a0<\/span><b><span data-contrast=\"auto\">\u010dekat\u00a0X\u00a0sekund\u00a0mezi\u00a0stop\/start\u00a0slu\u017eeb\u00a0po\u00a0resetu\u00a0servisn\u00edho\u00a0\u00fa\u010dtu<\/span><\/b><span data-contrast=\"auto\">,\u00a0specificky\u00a0pro Windows Domain service account reset.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">V\u00a0praxi\u00a0to\u00a0\u010dasto\u00a0rozhoduje\u00a0o tom, zda\u00a0rotace\u00a0prob\u011bhne\u00a0hladce,\u00a0nebo\u00a0vznikne\u00a0incident.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-879c92a elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"879c92a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-67eb2e7\" data-id=\"67eb2e7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3ff041a elementor-widget elementor-widget-heading\" data-id=\"3ff041a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">4. Kde \u201eservisn\u00ed \u00fa\u010dty\u201c v PAM360 \u017eij\u00ed: resources, domains, groups a asociace<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1503774 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"1503774\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3dda5e2\" data-id=\"3dda5e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-52859a2 elementor-widget elementor-widget-text-editor\" data-id=\"52859a2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>PAM360 je postaveno kolem Resources a Accounts a kolem skupin (groups), kter\u00e9 umo\u017e\u0148uj\u00ed automatizaci ve v\u011bt\u0161\u00edm m\u011b\u0159\u00edtku.<\/p><p>N\u011bkolik detail\u016f je u service accounts z\u00e1sadn\u00edch:<\/p><p>\u00a0<\/p><p><strong>WindowsDomain resources a NETBIOS dom\u00e9nov\u00e9 jm\u00e9no<\/strong><\/p><p>P\u0159i p\u0159id\u00e1v\u00e1n\u00ed dom\u00e9nov\u00e9ho kontroleru jako WindowsDomain resource dokumentace zd\u016fraz\u0148uje, \u017ee v poli Domain Name mus\u00edte zadat dom\u00e9nu jako <strong>NETBIOS<\/strong>, a zmi\u0148uje, \u017ee je to pot\u0159eba pro Windows Service Account Reset feature.<\/p><p>Tohle je typick\u00fd detail, kter\u00fd dok\u00e1\u017ee cel\u00fd sc\u00e9n\u00e1\u0159 ti\u0161e rozb\u00edt.<\/p><p>\u00a0<\/p><p><strong>Resource groups jako bezpe\u010dnostn\u00ed hranice propagace<\/strong><\/p><p>Ve workflow Windows Service Account reset se dom\u00e9nov\u00fd \u00fa\u010det asociuje s jednou nebo v\u00edce resource groups a PAM360 pak pomoc\u00ed t\u011bchto skupin zji\u0161\u0165uje a aplikuje zm\u011bny na serverech, kde se \u00fa\u010det pou\u017e\u00edv\u00e1.<\/p><p>Pokud jsou resource groups p\u0159\u00edli\u0161 \u0161irok\u00e9, v\u00fdrazn\u011b zvy\u0161ujete \u201eblast radius\u201c. Dobr\u00e1 praxe je stav\u011bt skupiny podle aplika\u010dn\u00edch hranic (nap\u0159. \u201eERP Web Tier\u201c, \u201ePayroll App Servers\u201c, \u201eSQL Cluster Nodes\u201c apod.).<\/p><p>\u00a0<\/p><p><strong>Discovery a sync: udr\u017een\u00ed invent\u00e1\u0159e aktu\u00e1ln\u00edho<\/strong><\/p><p>Pr\u016fvodce privileged accounts discovery uv\u00e1d\u00ed, \u017ee PAM360 um\u00ed objevovat resources a enumerovat privilegovan\u00e9 \u00fa\u010dty, a tak\u00e9 um\u00ed periodicky dotazovat AD pro udr\u017een\u00ed synchronizace. Doporu\u010duje nastavit AD sync interval na <strong>3 hodiny nebo v\u00edce<\/strong> podle velikosti prost\u0159ed\u00ed.<\/p><p>Z\u00e1vislosti servisn\u00edch \u00fa\u010dt\u016f se m\u011bn\u00ed \u2013 servery se rebuild\u00ed, aplikace se p\u0159esouvaj\u00ed, scheduled tasks se znovu vytv\u00e1\u0159\u00ed. Discovery + sync je to, co dr\u017e\u00ed rotace bezpe\u010dn\u00e9 dlouhodob\u011b.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1e57e86 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"1e57e86\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1c0a22a\" data-id=\"1c0a22a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-81fa0fc elementor-widget elementor-widget-heading\" data-id=\"81fa0fc\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">5. Scheduled tasks: podobn\u00fd probl\u00e9m, ale s omezen\u00edmi <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3ce54a elementor-widget elementor-widget-text-editor\" data-id=\"e3ce54a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">Scheduled tasks\u00a0maj\u00ed\u00a0sv\u00e9\u00a0specifikum.\u00a0Dokumentace\u00a0k Windows Scheduled Tasks Password Reset\u00a0uv\u00e1d\u00ed\u00a0dv\u011b\u00a0z\u00e1sadn\u00ed\u00a0omezen\u00ed:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Reset\u00a0hesla\u00a0je\u00a0podporovan\u00fd\u00a0jen pro\u00a0\u00falohy\u00a0<\/span><b><span data-contrast=\"auto\">V2<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Pokud\u00a0PAM360\u00a0b\u011b\u017e\u00ed\u00a0na\u00a0vy\u0161\u0161\u00ed\u00a0verzi\u00a0OS,\u00a0m\u016f\u017ee\u00a0selhat\u00a0reset\u00a0scheduled\u00a0task\u00a0hesel\u00a0na\u00a0\u00faloh\u00e1ch\u00a0b\u011b\u017e\u00edc\u00edch\u00a0na\u00a0<\/span><b><span data-contrast=\"auto\">ni\u017e\u0161\u00edch\u00a0OS\u00a0verz\u00edch<\/span><\/b><span data-contrast=\"auto\">\u00a0(p\u0159\u00edklad: PAM360 na 2016 vs\u00a0tasks\u00a0na 2008 a\u00a0ni\u017e\u0161\u00ed).<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><span data-contrast=\"auto\">Prakticky:\u00a0pokud\u00a0m\u00e1te\u00a0legacy\u00a0Windows\u00a0servery\u00a0s\u00a0kritick\u00fdmi\u00a0scheduled\u00a0tasks,\u00a0ov\u011b\u0159te\u00a0kompatibilitu\u00a0hned\u00a0na\u00a0za\u010d\u00e1tku,\u00a0ne\u00a0a\u017e\u00a0v\u00a0prvn\u00edm\u00a0rota\u010dn\u00edm\u00a0okn\u011b.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-991c9b4 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"991c9b4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f842690\" data-id=\"f842690\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5f43adf elementor-widget elementor-widget-heading\" data-id=\"5f43adf\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">6. Provozn\u00ed identita PAM360: service account vs gMSA <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bd3dad elementor-widget elementor-widget-text-editor\" data-id=\"6bd3dad\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b><span data-contrast=\"auto\">Varianta\u00a01:\u00a0Spou\u0161t\u011bt\u00a0PAM360\u00a0slu\u017ebu\u00a0pod\u00a0privilegovan\u00fdm\u00a0servisn\u00edm\u00a0\u00fa\u010dtem<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p>Dokumentace uv\u00e1d\u00ed, \u017ee pokud PAM360 Windows slu\u017eba b\u011b\u017e\u00ed pod privilegovan\u00fdm \u00fa\u010dtem (Domain Admin \/ lok\u00e1ln\u00ed admin na c\u00edlech), dok\u00e1\u017ee resetovat hesla i bez znalosti star\u00e9ho hesla. FAQ opakuje pot\u0159ebu service account (nebo gMSA) s odpov\u00eddaj\u00edc\u00edmi pr\u00e1vy pro discovery\/reset.<\/p><p><span data-contrast=\"auto\">Je to\u00a0siln\u00e9\u00a0\u2013 ale\u00a0jde\u00a0o\u00a0velmi\u00a0citlivou\u00a0identitu.\u00a0Zach\u00e1zejte\u00a0s\u00a0n\u00ed\u00a0jako s Tier-0:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"10\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">zak\u00e1zat\u00a0interaktivn\u00ed\u00a0logon,<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"10\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">monitorovat\u00a0jej\u00ed\u00a0pou\u017eit\u00ed,<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"10\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">minimalizovat\u00a0scope a\u00a0pr\u00e1va.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Varianta\u00a02:\u00a0Spou\u0161t\u011bt\u00a0PAM360\u00a0slu\u017ebu\u00a0pod\u00a0gMSA<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">PAM360\u00a0m\u00e1\u00a0n\u00e1vod\u00a0k\u00a0pou\u017eit\u00ed\u00a0<\/span><b><span data-contrast=\"auto\">gMSA<\/span><\/b><span data-contrast=\"auto\">\u00a0pro\u00a0b\u011bh\u00a0slu\u017eby\u00a0a popisuje jej jako \u201epasswordless\u201c\u00a0autentizaci\u00a0pro service logon,\u00a0v\u010detn\u011b\u00a0krok\u016f\u00a0konfigurace.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">gMSA\u00a0\u010dasto\u00a0sni\u017euje\u00a0operativn\u00ed\u00a0riziko\u00a0(neexistuje\u00a0klasick\u00e9\u00a0statick\u00e9\u00a0heslo,\u00a0kter\u00e9\u00a0by\u00a0se\u00a0sd\u00edlelo).\u00a0Po\u0159\u00e1d\u00a0ale\u00a0plat\u00ed,\u00a0\u017ee\u00a0v\u00fdsledn\u00e1\u00a0bezpe\u010dnost\u00a0z\u00e1vis\u00ed\u00a0na tom, jak\u00a0nastav\u00edte\u00a0opr\u00e1vn\u011bn\u00ed\u00a0a\u00a0kde\u00a0dovol\u00edte\u00a0dan\u00e9\u00a0gMSA\u00a0autentizovat.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1f088c3 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"1f088c3\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8389b25\" data-id=\"8389b25\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-744189b elementor-widget elementor-widget-heading\" data-id=\"744189b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">7. Servisn\u00ed \u00fa\u010dty a izolovan\u00e9 s\u00edt\u011b: Application Gateway <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-24f0dcf elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"24f0dcf\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-57e2740\" data-id=\"57e2740\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d3525dd elementor-widget elementor-widget-text-editor\" data-id=\"d3525dd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Pokud m\u00e1te segmentovan\u00e9\/odd\u011blen\u00e9 s\u00edt\u011b, kde PAM360 nem\u016f\u017ee p\u0159\u00edmo na c\u00edle, d\u00e1v\u00e1 smysl Application Gateway. P\u0159ehled Application Gateway v\u00fdslovn\u011b uv\u00e1d\u00ed, \u017ee p\u0159es gateway lze d\u011blat discovery mimo jin\u00e9 pro:<\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Service Accounts<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Scheduled Tasks<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0AppPools<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0Web.config\u00a0credentials<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p>To znamen\u00e1, \u017ee i v segmented prost\u0159ed\u00ed lze service account governance rozumn\u011b realizovat \u2013 jen mus\u00edte spr\u00e1vn\u011b navrhnout konektivitu a hranice d\u016fv\u011bry.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3884e90 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"3884e90\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-29358d8\" data-id=\"29358d8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1c85be4 elementor-widget elementor-widget-heading\" data-id=\"1c85be4\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">8. Neju\u017eite\u010dn\u011bj\u0161\u00ed ment\u00e1ln\u00ed model pro \u201eservisn\u00ed \u00fa\u010dty v PAM360\u201c <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35575c7 elementor-widget elementor-widget-text-editor\" data-id=\"35575c7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b><span data-contrast=\"auto\">Vrstva\u00a01: Identity,\u00a0kter\u00e9\u00a0spravujete\u00a0(co\u00a0rotujete)<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"12\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Dom\u00e9nov\u00e9\u00a0\u00fa\u010dty\u00a0pou\u017e\u00edvan\u00e9\u00a0slu\u017ebami\/\u00falohami\/app\u00a0pooly<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"12\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Hesla\u00a0ulo\u017een\u00e1\u00a0v\u00a0konfigura\u010dn\u00edch\u00a0souborech\u00a0aplikac\u00ed<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"12\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">API identity\u00a0typu\u00a0Google Workspace service account<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Vrstva\u00a02:\u00a0Z\u00e1vislosti,\u00a0kter\u00e9\u00a0mus\u00edte\u00a0synchronizovat\u00a0(kde\u00a0se\u00a0mus\u00ed\u00a0aktualizovat\u00a0heslo)<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"13\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Windows Services + Scheduled Tasks<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"13\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0AppPools<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"13\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0web.config\u00a0connection stringy \/\u00a0webov\u00e9\u00a0konfigurace<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Vrstva\u00a03:\u00a0Provozn\u00ed\u00a0identita,\u00a0kter\u00e1\u00a0zm\u011bny\u00a0prov\u00e1d\u00ed\u00a0(jak se to\u00a0technicky\u00a0vykon\u00e1)<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"14\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">\u00da\u010det, pod\u00a0kter\u00fdm\u00a0b\u011b\u017e\u00ed\u00a0PAM360 (service account\u00a0nebo\u00a0gMSA) s\u00a0pot\u0159ebn\u00fdmi\u00a0pr\u00e1vy<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><span data-contrast=\"auto\">Jakmile\u00a0si\u00a0tohle\u00a0v\u00a0t\u00fdmu\u00a0jasn\u011b\u00a0pojmenujete,\u00a0architektura\u00a0i troubleshooting je\u00a0v\u00fdrazn\u011b\u00a0jednodu\u0161\u0161\u00ed.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8d4de14 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"8d4de14\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4410fbf\" data-id=\"4410fbf\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-99f3438 elementor-widget elementor-widget-heading\" data-id=\"99f3438\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">9. Praktick\u00fd \u201estarter playbook\u201c pro service accounts v PAM360 <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-097cb31 elementor-widget elementor-widget-text-editor\" data-id=\"097cb31\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b><span data-contrast=\"auto\">Krok 1:\u00a0Vymezte\u00a0scope\u00a0invent\u00e1\u0159e\u00a0servisn\u00edch\u00a0\u00fa\u010dt\u016f<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Za\u010dn\u011bte\u00a0u\u00a0\u00fa\u010dt\u016f,\u00a0kter\u00e9\u00a0jsou\u00a0nejrizikov\u011bj\u0161\u00ed\u00a0nebo\u00a0nejv\u00edc\u00a0bol\u00ed\u00a0p\u0159i\u00a0v\u00fdpadku:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">\u00fa\u010dty\u00a0s\u00a0lok\u00e1ln\u00edm\u00a0adminem\u00a0\/\u00a0vysok\u00fdmi\u00a0pr\u00e1vy<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">\u00fa\u010dty\u00a0pou\u017e\u00edvan\u00e9\u00a0na\u00a0v\u00edce\u00a0serverech<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">\u00fa\u010dty,\u00a0kter\u00e9\u00a0sahaj\u00ed\u00a0na DB\u00a0nebo\u00a0identity\u00a0syst\u00e9my<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Krok 2:\u00a0Vytvo\u0159te\u00a0\u00fazk\u00e9\u00a0resource\u00a0groups\u00a0podle\u00a0aplikac\u00ed<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">C\u00edl:\u00a0rotovat\u00a0bezpe\u010dn\u011b\u00a0a\u00a0propagovat\u00a0zm\u011bnu\u00a0jen tam,\u00a0kde\u00a0opravdu\u00a0m\u00e1\u00a0b\u00fdt.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p>\u00a0<\/p><p><b><span data-contrast=\"auto\">Krok 3:\u00a0Zapn\u011bte\u00a0dependency-aware reset\u00a0funkce<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"16\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Windows Service Accounts reset (slu\u017eby\u00a0+\u00a0\u00falohy)<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"16\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Scheduled tasks reset (pokud\u00a0m\u00e1te\u00a0odd\u011blen\u00e9\u00a0identity pro\u00a0\u00falohy)<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"16\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0AppPools\u00a0reset<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"16\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">IIS\u00a0web.config\u00a0discovery\/reset<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Krok 4:\u00a0Dola\u010fte\u00a0restart\u00a0chov\u00e1n\u00ed<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"17\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">zapnout\u00a0restart tam,\u00a0kde\u00a0to\u00a0d\u00e1v\u00e1\u00a0smysl<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"17\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">nastavit\u00a0\u201ewait X seconds\u201c\u00a0mezi\u00a0stop\/start po\u00a0resetu,\u00a0pokud\u00a0to\u00a0slu\u017eby\u00a0vy\u017eaduj\u00ed<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><p><b><span data-contrast=\"auto\">Krok 5:\u00a0Automatizujte\u00a0rotaci\u00a0a\u017e\u00a0po\u00a0ov\u011b\u0159en\u00ed<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">PAM360\u00a0podporuje\u00a0pl\u00e1novanou\u00a0periodickou\u00a0rotaci\u00a0na\u00a0\u00farovni\u00a0<\/span><b><span data-contrast=\"auto\">resource\u00a0groups<\/span><\/b><span data-contrast=\"auto\">\u00a0(v\u010detn\u011b\u00a0retry\u00a0a\u00a0notifikac\u00ed).<\/span>\u00a0<br \/><span data-contrast=\"auto\">Automatizaci\u00a0berte\u00a0jako\u00a0posledn\u00ed\u00a0krok \u2013\u00a0a\u017e\u00a0po\u00a0n\u011bkolika\u00a0\u00fasp\u011b\u0161n\u00fdch\u00a0manu\u00e1ln\u00edch\/on-demand\u00a0rotac\u00edch.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c32ac4a elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"c32ac4a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2c5e146\" data-id=\"2c5e146\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-66f2b7a elementor-widget elementor-widget-heading\" data-id=\"66f2b7a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">10. Typick\u00e9 pasti (a jak se jim vyhnout) <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d26bfe elementor-widget elementor-widget-text-editor\" data-id=\"0d26bfe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"18\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">\u201eRotace\u00a0prob\u011bhla, ale\u00a0aplikace\u00a0spadla.\u201c<\/span><\/b>\u00a0<br \/><span data-contrast=\"auto\">Nej\u010dast\u011bji restart timing\u00a0nebo\u00a0chyb\u011bj\u00edc\u00ed\u00a0z\u00e1vislost\u00a0(AppPool, scheduled task,\u00a0web.config).\u00a0Pou\u017e\u00edvejte\u00a0podporovan\u00e9\u00a0discovery\/reset\u00a0funkce\u00a0a\u00a0dola\u010fte\u00a0\u010dek\u00e1n\u00ed\u00a0mezi\u00a0stop\/start.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"18\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">\u201eDiscovery\u00a0nenajde\u00a0v\u0161echno.\u201c<\/span><\/b>\u00a0<br \/><span data-contrast=\"auto\">Zkontrolujte prerequisites (.NET, VC++),\u00a0konektivitu\u00a0a scope AD discovery\/sync.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"18\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">\u201eService account reset\u00a0nefunguje\u00a0v\u016fbec.\u201c<\/span><\/b>\u00a0<br \/><span data-contrast=\"auto\">\u010casto je\u00a0probl\u00e9m\u00a0v\u00a0konfiguraci\u00a0WindowsDomain\u00a0resource (NETBIOS), WMI\/RPC,\u00a0nebo\u00a0pr\u00e1vech\u00a0\u00fa\u010dtu, pod\u00a0kter\u00fdm\u00a0PAM360\u00a0b\u011b\u017e\u00ed.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"18\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">\u201eScheduled tasks se\u00a0neaktualizuj\u00ed.\u201c<\/span><\/b>\u00a0<br \/><span data-contrast=\"auto\">Ov\u011b\u0159te V2\u00a0po\u017eadavek\u00a0a\u00a0OS\u00a0omezen\u00ed.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"18\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">\u201eM\u00e1me\u00a0segmentaci, PAM360\u00a0se\u00a0nedostane\u00a0na\u00a0c\u00edle.\u201c<\/span><\/b>\u00a0<br \/><span data-contrast=\"auto\">Pou\u017eijte Application Gateway pro discovery a password ops v\u00a0izolovan\u00fdch\u00a0s\u00edt\u00edch.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-43f44e5 elementor-section-boxed elementor-section-height-default elementor-section-height-default force-full-width-no\" data-id=\"43f44e5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-18b5e4a\" data-id=\"18b5e4a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b620792 elementor-widget elementor-widget-text-editor\" data-id=\"b620792\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b><span data-contrast=\"auto\">Referen\u010dn\u00ed\u00a0URL (ofici\u00e1ln\u00ed\u00a0dokumentace\u00a0a\u00a0kl\u00ed\u010dov\u00e9\u00a0n\u00e1vody)<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/windows_service_account_reset.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/windows-scheduled-tasks-reset.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/iis_apppool_account_reset.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/discovery-of-iis-web-config.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/remote_password_reset.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/privileged_accounts_discovery.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/adding_resources.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/general_settings.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/get-started.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/faq.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/ag-overview.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/google-service-account-config.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/what-is-service-account-management.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">https:\/\/www.manageengine.com\/privileged-access-management\/help\/checklist.html<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Pokud jste n\u011bkdy zkusili oto\u010dit (rotovat) heslo servisn\u00edho \u00fa\u010dtu a n\u00e1sledn\u011b v\u00e1m spadla polovina firemn\u00ed aplikace, u\u017e v\u00edte, jak to v praxi chod\u00ed: servisn\u00ed \u00fa\u010dty jsou z\u00e1rove\u0148 nepostradateln\u00e9 i k\u0159ehk\u00e9. Jsou nepostradateln\u00e9, proto\u017ee poh\u00e1n\u011bj\u00ed \u201eneviditelnou\u201c infrastrukturu \u2013 Windows slu\u017eby, pl\u00e1novan\u00e9 \u00falohy, IIS aplika\u010dn\u00ed pooly, integrace a automatizace, kter\u00e9 mus\u00ed fungovat i tehdy, kdy\u017e nen\u00ed nikdo [&hellip;]<\/p>\n","protected":false},"author":69,"featured_media":106016,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","om_disable_all_campaigns":false,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_links_to":"","_links_to_target":""},"categories":[274],"tags":[624],"acf":[],"aioseo_notices":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360? - MWT Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360? - MWT Solutions\" \/>\n<meta property=\"og:description\" content=\"Pokud jste n\u011bkdy zkusili oto\u010dit (rotovat) heslo servisn\u00edho \u00fa\u010dtu a n\u00e1sledn\u011b v\u00e1m spadla polovina firemn\u00ed aplikace, u\u017e v\u00edte, jak to v praxi chod\u00ed: servisn\u00ed \u00fa\u010dty jsou z\u00e1rove\u0148 nepostradateln\u00e9 i k\u0159ehk\u00e9. Jsou nepostradateln\u00e9, proto\u017ee poh\u00e1n\u011bj\u00ed \u201eneviditelnou\u201c infrastrukturu \u2013 Windows slu\u017eby, pl\u00e1novan\u00e9 \u00falohy, IIS aplika\u010dn\u00ed pooly, integrace a automatizace, kter\u00e9 mus\u00ed fungovat i tehdy, kdy\u017e nen\u00ed nikdo [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\" \/>\n<meta property=\"og:site_name\" content=\"MWT Solutions\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-19T14:29:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-20T09:07:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2026\/01\/CZ26_artykul_PAM360_artykul_na_www_1153x604-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1153\" \/>\n\t<meta property=\"og:image:height\" content=\"604\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Magdalena Izban\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napsal(a)\" \/>\n\t<meta name=\"twitter:data1\" content=\"Magdalena Izban\" \/>\n\t<meta name=\"twitter:label2\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\"},\"author\":{\"name\":\"Magdalena Izban\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/#\/schema\/person\/0ddbc621ee9b87f37564ea3958a2c93d\"},\"headline\":\"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360?\",\"datePublished\":\"2026-01-19T14:29:07+00:00\",\"dateModified\":\"2026-01-20T09:07:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\"},\"wordCount\":2295,\"publisher\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/#organization\"},\"keywords\":[\"PAM360\"],\"articleSection\":[\"\u010cl\u00e1nky\"],\"inLanguage\":\"cs\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\",\"url\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\",\"name\":\"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360? - MWT Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/#website\"},\"datePublished\":\"2026-01-19T14:29:07+00:00\",\"dateModified\":\"2026-01-20T09:07:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/i.mwtsolutions.eu\/cs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Co&nbsp;jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v&nbsp;ManageEngine PAM360?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/#website\",\"url\":\"https:\/\/i.mwtsolutions.eu\/\",\"name\":\"MWT Solutions\",\"description\":\"Kolejna witryna oparta na WordPressie\",\"publisher\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/i.mwtsolutions.eu\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"cs\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/#organization\",\"name\":\"MWT Solutions\",\"url\":\"https:\/\/i.mwtsolutions.eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2025\/05\/logo_MWT_rgb-color-1.png\",\"contentUrl\":\"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2025\/05\/logo_MWT_rgb-color-1.png\",\"width\":2825,\"height\":850,\"caption\":\"MWT Solutions\"},\"image\":{\"@id\":\"https:\/\/i.mwtsolutions.eu\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/pl.linkedin.com\/company\/mwt-solutions\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/#\/schema\/person\/0ddbc621ee9b87f37564ea3958a2c93d\",\"name\":\"Magdalena Izban\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\/\/i.mwtsolutions.eu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c44375979851261734a8474ed77e1c50?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c44375979851261734a8474ed77e1c50?s=96&d=mm&r=g\",\"caption\":\"Magdalena Izban\"},\"url\":\"https:\/\/i.mwtsolutions.eu\/cs\/author\/magdalena-izban\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360? - MWT Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/","og_locale":"cs_CZ","og_type":"article","og_title":"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360? - MWT Solutions","og_description":"Pokud jste n\u011bkdy zkusili oto\u010dit (rotovat) heslo servisn\u00edho \u00fa\u010dtu a n\u00e1sledn\u011b v\u00e1m spadla polovina firemn\u00ed aplikace, u\u017e v\u00edte, jak to v praxi chod\u00ed: servisn\u00ed \u00fa\u010dty jsou z\u00e1rove\u0148 nepostradateln\u00e9 i k\u0159ehk\u00e9. Jsou nepostradateln\u00e9, proto\u017ee poh\u00e1n\u011bj\u00ed \u201eneviditelnou\u201c infrastrukturu \u2013 Windows slu\u017eby, pl\u00e1novan\u00e9 \u00falohy, IIS aplika\u010dn\u00ed pooly, integrace a automatizace, kter\u00e9 mus\u00ed fungovat i tehdy, kdy\u017e nen\u00ed nikdo [&hellip;]","og_url":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/","og_site_name":"MWT Solutions","article_published_time":"2026-01-19T14:29:07+00:00","article_modified_time":"2026-01-20T09:07:26+00:00","og_image":[{"width":1153,"height":604,"url":"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2026\/01\/CZ26_artykul_PAM360_artykul_na_www_1153x604-1.jpg","type":"image\/jpeg"}],"author":"Magdalena Izban","twitter_card":"summary_large_image","twitter_misc":{"Napsal(a)":"Magdalena Izban","Odhadovan\u00e1 doba \u010dten\u00ed":"11 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/#article","isPartOf":{"@id":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/"},"author":{"name":"Magdalena Izban","@id":"https:\/\/i.mwtsolutions.eu\/#\/schema\/person\/0ddbc621ee9b87f37564ea3958a2c93d"},"headline":"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360?","datePublished":"2026-01-19T14:29:07+00:00","dateModified":"2026-01-20T09:07:26+00:00","mainEntityOfPage":{"@id":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/"},"wordCount":2295,"publisher":{"@id":"https:\/\/i.mwtsolutions.eu\/#organization"},"keywords":["PAM360"],"articleSection":["\u010cl\u00e1nky"],"inLanguage":"cs"},{"@type":"WebPage","@id":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/","url":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/","name":"Co jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v ManageEngine PAM360? - MWT Solutions","isPartOf":{"@id":"https:\/\/i.mwtsolutions.eu\/#website"},"datePublished":"2026-01-19T14:29:07+00:00","dateModified":"2026-01-20T09:07:26+00:00","breadcrumb":{"@id":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/i.mwtsolutions.eu\/cs\/clanky\/co-jsou-servisni-ucty-v-manageengine-pam360\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i.mwtsolutions.eu\/cs\/"},{"@type":"ListItem","position":2,"name":"Co&nbsp;jsou \u201eservisn\u00ed \u00fa\u010dty\u201c v&nbsp;ManageEngine PAM360?"}]},{"@type":"WebSite","@id":"https:\/\/i.mwtsolutions.eu\/#website","url":"https:\/\/i.mwtsolutions.eu\/","name":"MWT Solutions","description":"Kolejna witryna oparta na WordPressie","publisher":{"@id":"https:\/\/i.mwtsolutions.eu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i.mwtsolutions.eu\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"cs"},{"@type":"Organization","@id":"https:\/\/i.mwtsolutions.eu\/#organization","name":"MWT Solutions","url":"https:\/\/i.mwtsolutions.eu\/","logo":{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/i.mwtsolutions.eu\/#\/schema\/logo\/image\/","url":"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2025\/05\/logo_MWT_rgb-color-1.png","contentUrl":"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2025\/05\/logo_MWT_rgb-color-1.png","width":2825,"height":850,"caption":"MWT Solutions"},"image":{"@id":"https:\/\/i.mwtsolutions.eu\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/pl.linkedin.com\/company\/mwt-solutions"]},{"@type":"Person","@id":"https:\/\/i.mwtsolutions.eu\/#\/schema\/person\/0ddbc621ee9b87f37564ea3958a2c93d","name":"Magdalena Izban","image":{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/i.mwtsolutions.eu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c44375979851261734a8474ed77e1c50?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c44375979851261734a8474ed77e1c50?s=96&d=mm&r=g","caption":"Magdalena Izban"},"url":"https:\/\/i.mwtsolutions.eu\/cs\/author\/magdalena-izban\/"}]}},"_links":{"self":[{"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/posts\/105951"}],"collection":[{"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/users\/69"}],"replies":[{"embeddable":true,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/comments?post=105951"}],"version-history":[{"count":48,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/posts\/105951\/revisions"}],"predecessor-version":[{"id":106020,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/posts\/105951\/revisions\/106020"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/media\/106016"}],"wp:attachment":[{"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/media?parent=105951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/categories?post=105951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i.mwtsolutions.eu\/cs\/wp-json\/wp\/v2\/tags?post=105951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}