Re: Local System Account & Network Access

Offhand I don't know exactly what is going on but what I would do is to
check the security log on the server that has the administrator share to see
the type 3 logon event generated when access is allowed to the share and the
user name. The events in the log are time stamped so it should be easy to
find. The info in the link below may also be helpful if you have not seen it
yet on planning security for service accounts. --- Steve

http://www.microsoft.com/technet/security/topics/serversecurity/serviceaccount/sspgch03.mspx
-- The Services and Service Accounts Security Planning Guide


"Alwin" <Alwin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:578755CB-FC31-4512-91D7-B8379710C22E@xxxxxxxxxxxxxxxx
Hi,

I have a custom developed windows service running on XP - very simple , it
accepts commands via TCP/IP and executes them on the pc on which it is
installed.

The service gets installed with 'Local System' account credentials which
by
all accounts does not have access to network resources. I am however able
to
send commands to the service instructing it to install software packages
which reside on a network share (shared read-only for domain users) and it
works just fine.

I am concerned because all the documentation I have read indicates that
this
should not be possible, are there any special circumstances where the
System
account can access UNC share paths?


.

Relevant Pages

  • RE: Windows XP Guest Account.
    ... Look in the Event Viewer - Security log. ... Subject: Windows XP Guest Account. ... connected to the internet, first thing I install XP and restart the system, ...
    (Incidents)
  • Re: Security Breach
    ... You need to post this in an appropriate Security News Groups such as; ... I did not create the accounts. ... password shouldn't they be able to tell from the security log: ... | a) which machine they were logged into ('cos it can't have been mine, ...
    (microsoft.public.windowsxp.general)
  • Re: Security and administrator passwords on SBS 2003 SP1
    ... Every computer must have an administrator: someone who can install software, configure the operating system, add and manage user accounts, establish security policies, and handle all the other management tasks associated with keeping a computer up and running. ...
    (microsoft.public.windows.server.sbs)
  • Re: Integrated security - why not?
    ... Let me explain why we seldom use Integrated Security for Internet asp.net ... how could we setup accounts for them? ... !server to the public network with services such as SQL Server (remember SQL ... The DC at the ISP is not for our own use. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: absolutepoker news
    ... The chances of uncovering any further cheating at any other site are probably slim to none. ... However, knowing poker players as I do, my guess is most Absolute customers will stay right where they are. ... The statement acknowledges the security breach within Absolute's system that allowed information about opponents' hole cards to be transmitted to several suspect accounts, and confirmed that the hand log released accidentally to Marco 'CrazyMarco' Johnson, the runner-up in the suspect tournament, did in fact highlight the security flaw that allowed the site to be compromised. ...
    (rec.gambling.poker)