Built-in SID accounts???

There are built in security identifiers for windows server 2003. You can
specfiy different ones to launch the services.
What I don't know is if there are diffierent permissions based on the one
you use.

SID: S-1-5-18
Name; Local System

SID: S-1-5-19
Name: NT Authority\Local Service

SID: S-1-5-20
Name: NT Authority\Network Service

Applied a high security template that impacted the SQL2005Express service
starting up as a service. It was using the Logon as Network Service.
If I change the logon to use Local System, then it starts with no errors.
But concerned that there may be something else broke that I haven't
discovered.

S
Mon Nov 06 06:23:42 CST 2006

Nope, running as the Local System should be allright - it's a usual SQL
Server acount since forever (into OS/2 and Sybase/UNIX times).

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"dgood" <dgood@discussions.microsoft.com> wrote in message
news:73B587B2-DEFE-4583-AE38-EC6F4B3DCAF3@microsoft.com...
> There are built in security identifiers for windows server 2003. You can
> specfiy different ones to launch the services.
> What I don't know is if there are diffierent permissions based on the one
> you use.
>
> SID: S-1-5-18
> Name; Local System
>
> SID: S-1-5-19
> Name: NT Authority\Local Service
>
> SID: S-1-5-20
> Name: NT Authority\Network Service
>
> Applied a high security template that impacted the SQL2005Express service
> starting up as a service. It was using the Logon as Network Service.
> If I change the logon to use Local System, then it starts with no errors.
> But concerned that there may be something else broke that I haven't
> discovered.
>