Been reading about
- Managed Service Accounts
- Virtual Accounts
- Domain Service-only users with non-expiring accounts
… and impersonation seems to be the way to get to use those accounts… but I’m not quite getting it right now. And of course stupidly I blew my credits on my MSDN Azure account so I can’t have a play.