win service security question

[Tom]

hello

there's something that I don't understand

what is the difference between running a service in say User context and
LocalService security context ?

and what is the difference between NetworkService and LocalSystem ?

those two are a little confusing could you explain in english please
thanks

Tom

 

[Guest]

Running as a user, it acts as if it was that user - i.e. the operating system
grants permissions to it as if it was that user. I wouldn't say this was a
particularly good idea, because that user might not exist when the service is
still required, and I'm sure there's a whole host of other reasons I can't
think of.
Services could run under the LocalService account (the default), but that
doesn't have particularly great permissions. If you need higher permissions
(but only if), to do things like modifying files, then you should use the
LocalSystem account, which is still a generic account for services, but has
better permissions than LocalService. But that said, use LocalService (which
is the default) if it allows you to do all you need to.

 

[Tom]

ahh

thanks

Running as a user, it acts as if it was that user - i.e. the operating system
grants permissions to it as if it was that user. I wouldn't say this was a
particularly good idea, because that user might not exist when the service is
still required, and I'm sure there's a whole host of other reasons I can't
think of.
Services could run under the LocalService account (the default), but that
doesn't have particularly great permissions. If you need higher permissions
(but only if), to do things like modifying files, then you should use the
LocalSystem account, which is still a generic account for services, but has
better permissions than LocalService. But that said, use LocalService (which
is the default) if it allows you to do all you need to.