Windows server 2003

[Pierre A. Humblet]

Corinna Vinschen wrote:
> 
> On Wed, Apr 09, 2003 at 10:38:01AM -0400, Pierre A. Humblet wrote:
> > > I don't think any of these accounts are actually member of any group.
> > > It's just the way access tokens are created so it looks like SYSTEM
> > > is member of admins.  I didn't look into an access token of a process
> > > under any of the other well-known SIDs, though.
> >
> > I just looked up MSDN. It says their privileges include those of Users
> > and Authenticated Users, which most probably means they are in those groups.
> 
> Probably.  I've just searched MSDN for that info but didn't find it.  I
> found only a hint that the service processes only have a few privileges
> and are not member of the local admins group.
> 
> Could you give me a pointer?

Sure. Last line in
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dllproc/base/localservice_account.asp>
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dllproc/base/networkservice_account.asp>
It looks like the only diff between them is how they act on the 
network (anonymous vs. local computer).

Pierre