Services and Network Service

[Merrik]

I created a simple service which works fine under local service system account; however if I try and use NT AUTHORITY\NetworkService I get "Could not start the ATService service on Local Computer. Error 5: Access is denied."

Has anyone seen this?

Hopefully someone has a solution

Thanks

[November]

"Local Service Account

The Local Service account is a built-in account that has the same level of access to resources and objects as members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised. Services that run as the Local Service account access network resources as a null session without credentials. Be aware that the Local Service account is not supported for the SQL Server or SQL Server Agent services. The actual name of the account is "NT AUTHORITY\Local Service account"."

The Network Service is essentially the same thing but for networking aspects of your machine. The way I understand it, they are local accounts that run background processes but keep your machine more safe should something be compromised

Local System account

The Local System account is a powerful account that has full access to the system, including the directory service on domain controllers. If a service logs on to the Local System account on a domain controller, that service has access to the entire domain. Some services are configured by default to log on to the Local System account. Do not change the default service setting.

Local Service account

The Local Service account is a special, built-in account that is similar to an authenticated user account. The Local Service account has the same level of access to resources and objects as members of the Users group. This limited access helps safeguard your system if individual services or processes are compromised. Services that run as the Local Service account access network resources as a null session with no credentials.

Network Service account

The Network Service account is a special, built-in account that is similar to an authenticated user account. The Network Service account has the same level of access to resources and objects as members of the Users group. This limited access helps safeguard your system if individual services or processes are compromised. Services that run as the Network Service account access network resources using the credentials of the computer account.

Cheers.

Edited April 29, 2011 by November