Question About Windows Service Account

Post by **a13n** » Mon Dec 26, 2005 12:22 pm

Hi!
Did you enjoy your Christmas?
/me got a new windows trouble from Santa!
Here is the present.
Look at the pic below, well, the lower right dialog.
You'll find a "log on as" label.
What does this do?
And does explicit user creation and its assignment make windows secure?

Post by **raw** » Mon Dec 26, 2005 1:55 pm

http://support.microsoft.com/kb/q132679/

Post by **a13n** » Tue Dec 27, 2005 10:34 am

@raw
I checked your link but it did not help very much.

Post by **raw** » Tue Dec 27, 2005 1:19 pm

http://support.microsoft.com/kb/q120929/

Post by **a13n** » Wed Dec 28, 2005 9:41 am

raw wrote:http://support.microsoft.com/kb/q120929/

Thank you.
A bit understood.
So do any of these services can be run by users other than system account, say, a user named "Nancy" to whom given an administrative privelege?

Post by **Tormentius** » Wed Dec 28, 2005 8:47 pm

a13n wrote:
raw wrote:http://support.microsoft.com/kb/q120929/
Thank you.
A bit understood.
So do any of these services can be run by users other than system account, say, a user named "Nancy" to whom given an administrative privelege?

The user would need to be given the "run as a service" priveledge in your security settings.

Post by **a13n** » Thu Dec 29, 2005 12:17 am

@Tom
Does it mean that each user creation and assignment to each service make one's system more secure in that malicious attacker has to rob each acount one by one to stop all services?
Or because each user has adminitrative priveledge to run as a serivce, just one stolen account leads to the end?

Post by **Tormentius** » Thu Dec 29, 2005 6:55 pm

If an admin account is compromised, its over. Any admin can stop, restart, or edit a service's properties or any other portion of the OS.

Post by **a13n** » Fri Dec 30, 2005 6:02 am

I see.
Thank you.

I'll leave these "log on as" related things untouched.