****************************************************************
* Description: Knowledge of Windows service account type detail
* Date: 05:48 PM EST, 03/12/2018
****************************************************************

		 
<1> Following are Windows Service User Account Type:
     |
     |
     |__ o. Domain User Account:
     |    |
     |    |__ o. If the service must interact with network services, access domain resources like file shares or using linked server connections to other computers running SQL Server,
     |           you might use a minimally-privileged domain account. 
     |           Many server-to-server activities can be performed only with a domain user account. 
     |           This account should be pre-created by domain administration in your environment.
     |    
     |
     |
     |__ o. Local User Account:
     |    |
     |    |__ o. If the computer is not part of a domain, a local user account without Windows administrator permissions is recommended.    
     |
     |
     |
     |
     |__ o. Local System:
     |    |
     |    |__ o. Local System is a very high-privileged built-in account. 
     |           It has extensive privileges on the local system and acts as the computer on the network. 
     |           The actual name of the account is "NT AUTHORITY\SYSTEM".
     |    
     |
     |  
     |__ o. Local Service:
     |    |
     |    |__ o. Local Service account is a built-in account that has the same level of access to resources and objects as members of the Users group.
     |           This limited access helps safeguard the system if individual services or processes are compromised. 
     |           Services that run as the Local Service account access network resources as a null session without credentials. 
     |           Be aware that the Local Service account is not supported for the SQL Server or SQL Server Agent services. 
     |           The actual name of the account is "NT AUTHORITY\LOCAL SERVICE".  
     |  
     |  
     |  
     |__ o. Network Service:
         |
         |__ Network Service account is a built-in account that has more access to resources and objects than members of the Users group. 
             Services that run as the Network Service account access network resources by using the credentials of the computer account. 
             The actual name of the account is "NT AUTHORITY\NETWORK SERVICE".

    
	

Your Comments