win service security question

  • Thread starter Thread starter Tom
  • Start date Start date
T

Tom

hello

there's something that I don't understand

what is the difference between running a service in say User context and
LocalService security context ?

and what is the difference between NetworkService and LocalSystem ?

those two are a little confusing could you explain in english please :P
thanks

Tom
 
Running as a user, it acts as if it was that user - i.e. the operating system
grants permissions to it as if it was that user. I wouldn't say this was a
particularly good idea, because that user might not exist when the service is
still required, and I'm sure there's a whole host of other reasons I can't
think of.
Services could run under the LocalService account (the default), but that
doesn't have particularly great permissions. If you need higher permissions
(but only if), to do things like modifying files, then you should use the
LocalSystem account, which is still a generic account for services, but has
better permissions than LocalService. But that said, use LocalService (which
is the default) if it allows you to do all you need to.
 
ahh

thanks


Bonj said:
Running as a user, it acts as if it was that user - i.e. the operating system
grants permissions to it as if it was that user. I wouldn't say this was a
particularly good idea, because that user might not exist when the service is
still required, and I'm sure there's a whole host of other reasons I can't
think of.
Services could run under the LocalService account (the default), but that
doesn't have particularly great permissions. If you need higher permissions
(but only if), to do things like modifying files, then you should use the
LocalSystem account, which is still a generic account for services, but has
better permissions than LocalService. But that said, use LocalService (which
is the default) if it allows you to do all you need to.
Click to expand...
 
Back
Top