log-on as a service

[John A Grandy]

in xp pro, how to grant a user the right to log-on as a service?

[Chris Jackson]

I'm not sure what you are trying to do here? A service is simply an
application that runs automatically when the operating system boots up. It
stores the user credentials that it needs in order to create a user token
and launch the process with that token. Now, there are user account for
LocalService and NetworkService, but you can't get that these directly.
These accounts exist to provide you with a low-privileged account token to
launch these processes under, so you no longer have to run every service
with the very powerful (and dangerous, if compromised) System account.

If you want a user to have the most access to the system, then add that user
to the administrators group.

--
Chris Jackson
Software Engineer
Microsoft MVP - Windows Shell/UI
Windows XP Associate Expert
--
More people read the newsgroups than read my email.
Reply to the newsgroup for a faster response.
(Control-G using Outlook Express)
--

"John A Grandy" <johnagrandy-at-yahoo.com> wrote in message
...
> in xp pro, how to grant a user the right to log-on as a service?
>
>

[Ronnie Vernon MVP]

John A Grandy wrote:
> in xp pro, how to grant a user the right to log-on as a service?

John

Start/Run gpedit.msc OK. Go to Computer Configuration / Windows Settings
/ Security Settings / Local Policies / User Rights Assignment. Scroll down
to "Log on as a service".

Microsoft Windows XP - Modifying Local Security Policy Settings:
http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/prdd_sec_eevm.asp?frame=true

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.

[John A Grandy]

thanks. it was a little easier in w2k wasn't it ... :)

"Ronnie Vernon MVP" > wrote in message
...
> John A Grandy wrote:
> > in xp pro, how to grant a user the right to log-on as a service?
>
> John
>
> Start/Run gpedit.msc OK. Go to Computer Configuration / Windows
Settings
> / Security Settings / Local Policies / User Rights Assignment. Scroll down
> to "Log on as a service".
>
> Microsoft Windows XP - Modifying Local Security Policy Settings:
>
http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/prdd_sec_eevm.asp?frame=true
>
> --
> Ronnie Vernon
> Microsoft MVP
> Windows Shell/User
>
> Please reply to the newsgroup so all may benefit.
>
>

[John A Grandy]

user is already in the administrators group.

"Chris Jackson" <chrisjATmvpsDOTorgNOSPAM> wrote in message
...
> I'm not sure what you are trying to do here? A service is simply an
> application that runs automatically when the operating system boots up. It
> stores the user credentials that it needs in order to create a user token
> and launch the process with that token. Now, there are user account for
> LocalService and NetworkService, but you can't get that these directly.
> These accounts exist to provide you with a low-privileged account token to
> launch these processes under, so you no longer have to run every service
> with the very powerful (and dangerous, if compromised) System account.
>
> If you want a user to have the most access to the system, then add that
user
> to the administrators group.
>
> --
> Chris Jackson
> Software Engineer
> Microsoft MVP - Windows Shell/UI
> Windows XP Associate Expert
> --
> More people read the newsgroups than read my email.
> Reply to the newsgroup for a faster response.
> (Control-G using Outlook Express)
> --
>
> "John A Grandy" <johnagrandy-at-yahoo.com> wrote in message
> ...
> > in xp pro, how to grant a user the right to log-on as a service?
> >
> >
>
>

[Ronnie Vernon MVP]

John A Grandy wrote:
> thanks. it was a little easier in w2k wasn't it ... :)
>
<snip>

Yup, but not near as much fun. <g>

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.