Page 1 of 1
Question About Windows Service Account
Posted: Mon Dec 26, 2005 12:22 pm
by a13n
Hi!
Did you enjoy your Christmas?
/me got a new windows trouble from Santa!
Here is the present.
Look at the pic below, well, the lower right dialog.
You'll find a "log on as" label.
What does this do?
And does explicit user creation and its assignment make windows secure?
Posted: Mon Dec 26, 2005 1:55 pm
by raw
Posted: Tue Dec 27, 2005 10:34 am
by a13n
@raw
I checked your link but it did not help very much.
Posted: Tue Dec 27, 2005 1:19 pm
by raw
Posted: Wed Dec 28, 2005 9:41 am
by a13n
raw wrote:http://support.microsoft.com/kb/q120929/
Thank you.
A bit understood.
So do any of these services can be run by users other than system account, say, a user named "Nancy" to whom given an administrative privelege?
Posted: Wed Dec 28, 2005 8:47 pm
by Tormentius
a13n wrote:raw wrote:http://support.microsoft.com/kb/q120929/
Thank you.
A bit understood.
So do any of these services can be run by users other than system account, say, a user named "Nancy" to whom given an administrative privelege?
The user would need to be given the "run as a service" priveledge in your security settings.
Posted: Thu Dec 29, 2005 12:17 am
by a13n
@Tom
Does it mean that each user creation and assignment to each service make one's system more secure in that malicious attacker has to rob each acount one by one to stop all services?
Or because each user has adminitrative priveledge to run as a serivce, just one stolen account leads to the end?
Posted: Thu Dec 29, 2005 6:55 pm
by Tormentius
If an admin account is compromised, its over. Any admin can stop, restart, or edit a service's properties or any other portion of the OS.
Posted: Fri Dec 30, 2005 6:02 am
by a13n
I see.
Thank you.
I'll leave these "log on as" related things untouched.