Credential used when starting Windows Services during comp..

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi!

I would like to know what credentials are used when the services (set up to be started automatically at machine startup) are run during Win2K & WinXP workstation/server startup!

Is the computer account used or is it the Local System account that is used to do that?

I ask you that cause I noticed that any kind of user on my domain was able to launch remotely a service like "Telnet" on my DC without any credential problem!!
Which is to my mind not very secure!
How does most people do regarding this matter?

Thanks in advance for any kind of help.
Julien.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

The user context is set separately for each service.

Go to services control panel (services.msc) and you can see which services
are running in which contexts. Unless you know what you're doing, don't
change any of them. You're far more likely to break things than make them
better.

-Matt

===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Credential used when starting Windows Services during
computer sta
>thread-index: AcRj1wTi0nGrrZibTaulFB3tDAguCA==
>X-WBNR-Posting-Host: 221.253.41.162
>From: =?Utf-8?B?SnVsaWVu?= <Julien@discussions.microsoft.com>
>Subject: Credential used when starting Windows Services during computer sta
>Date: Tue, 6 Jul 2004 21:01:02 -0700
>Lines: 12
>Message-ID: <C51136F4-8C0C-406B-8509-9D15E0007A67@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.win2000.security
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 127.0.0.1
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.security:29139
>X-Tomcat-NG: microsoft.public.win2000.security
>
>Hi!
>
>I would like to know what credentials are used when the services (set up
to be started automatically at machine startup) are run during Win2K &
WinXP workstation/server startup!
>
>Is the computer account used or is it the Local System account that is
used to do that?
>
>I ask you that cause I noticed that any kind of user on my domain was able
to launch remotely a service like "Telnet" on my DC without any credential
problem!!
>Which is to my mind not very secure!
>How does most people do regarding this matter?
>
>Thanks in advance for any kind of help.
>Julien.
>