Recommended ACL for NTFS For Network Service



Windows XP SP2 and Windows 2003 introduce Network Service and Local Service
userids as alternate, lower-privilege than SYSTEM, contexts for running
certain services. If I want to use NTFS and a highly restricted file ACL
to limit the damage a virus can do to the system while running in an
ordinary user's context, then what access does Local Service and Network
Service need to the boot volume? If Microsoft publishes a recommended ACL
for these services I would like to see it.

--
Will


.



Relevant Pages

  • Re: Event ID 1202 534.
    ... I have an Active Directory Windows 2000 Mixte. ... in problem are Network Service and Local service in my Default Domain ... I went on this policy and removed and added back the Network Service ... Windows 2003 because in Windows 2000, the Network Service account is ...
    (microsoft.public.windows.server.active_directory)
  • Event ID 1202 534.
    ... Service and Local service in my Default Domain Controller Policy. ... Local Service account to be sure that everything is ok. ... Is it a problem related with Windows ... the Network Service account is not a built-in ...
    (microsoft.public.windows.server.active_directory)
  • RE: Event ID 1202 534.
    ... All are Windows Standard version. ... Service and Local service in my Default Domain Controller Policy. ... Local Service account to be sure that everything is ok. ... the Network Service account is not a built-in ...
    (microsoft.public.windows.server.active_directory)
  • Re: Why do I have multiple HKEY_USERS but only one account?
    ... Local Service and Network Service accounts ... In Windows 2000/NT, system services are launched with "Local System" ... .DEFAULT - the default user account used when creating a new user account ...
    (microsoft.public.windowsxp.customize)
  • Re: companyweb - Service Unavailable (progress)
    ... When you run the Componet Check again, you see any files missing? ... Add Local Service and Network Service account Read & Execute, ... This will allow Backup and Monitoring folders under "Temporary ASP.NET ...
    (microsoft.public.windows.server.sbs)

Quantcast