log-on as a service

  • Thread starter Thread starter John A Grandy
  • Start date Start date
I'm not sure what you are trying to do here? A service is simply an
application that runs automatically when the operating system boots up. It
stores the user credentials that it needs in order to create a user token
and launch the process with that token. Now, there are user account for
LocalService and NetworkService, but you can't get that these directly.
These accounts exist to provide you with a low-privileged account token to
launch these processes under, so you no longer have to run every service
with the very powerful (and dangerous, if compromised) System account.

If you want a user to have the most access to the system, then add that user
to the administrators group.
 
John said:
in xp pro, how to grant a user the right to log-on as a service?
Click to expand...

John

Start/Run gpedit.msc OK. Go to Computer Configuration / Windows Settings
/ Security Settings / Local Policies / User Rights Assignment. Scroll down
to "Log on as a service".

Microsoft Windows XP - Modifying Local Security Policy Settings:
http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/prdd_sec_eevm.asp?frame=true

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.
 
user is already in the administrators group.

Chris Jackson said:
I'm not sure what you are trying to do here? A service is simply an
application that runs automatically when the operating system boots up. It
stores the user credentials that it needs in order to create a user token
and launch the process with that token. Now, there are user account for
LocalService and NetworkService, but you can't get that these directly.
These accounts exist to provide you with a low-privileged account token to
launch these processes under, so you no longer have to run every service
with the very powerful (and dangerous, if compromised) System account.

If you want a user to have the most access to the system, then add that user
to the administrators group.

--
Chris Jackson
Software Engineer
Microsoft MVP - Windows Shell/UI
Windows XP Associate Expert
Click to expand...
 
John said:
thanks. it was a little easier in w2k wasn't it ... :)
Click to expand...
<snip>

Yup, but not near as much fun. <g>

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.
 
Back
Top