Windows 2008 Local System vs Administrator Account

Difference Between Local System account and Administrator.
https://msdn2.microsoft.com/en-us/library/ms684190.aspx

The LocalSystem account is an account used by the system in executing
processes and whatnot. In the Windows security architecture, everything
uses an account on the system for something (this is why Internet
Information Server does not allow the use of permissions based on a
..htaccess file like Unix webservers do--all security is handled by an
account).

Most services that run on a Windows machine run as the LocalSystem user,
though some services (typically third-party services) may need to run as
another user, particularly if they access other computers on the network
(such as backup applications).

Here are a couple of links:
http://support.microsoft.com/kb/q120929/
https://msdn2.microsoft.com/en-us/library/ms684190.aspx
http://www.serverwatch.com/tutorials...le.php/2178901

Hope that helps!

the aboce was ref from : http://alieneyes.wordpress.com/2006/10/23/how-to-gain-access-to-system-account-the-most-powerful-account-in-windows/#comments

also check out;

http://support.microsoft.com/kb/120929

http://support.microsoft.com/kb/243330

http://www.techhut.in/2007/02/hacking-windows-system-account.html

cheers

Local System has more privileges than Administrator

Here is some info on it

http://msdn.microsoft.com/en-us/library/windows/desktop/ms684190%28v=vs.85%29.aspx

In General, if you are installing software and need to specify a service account I would use Administrator (or a Domain Admin level Account depending on if it needs network access).

Great articles everyone... I guess I was confused becuase one of are vendors recommed that we switch a service account on a service from local system to administrator on a 2008 R2 server is order for a install to complete. According to these articles going from local system to administrator is a downgrade in premissions correct

best to stick to vendor recomendations, and screw up your system with local system account settings. cheers

S00007359, great responces!!!

in your first responce, why do you have to schedule cmd.exe to run via a schedule task in order to access the local system account. I'm a little confused on this part.

I tried to schedule the CMD to run on my Winodws 7 workstation but it stated that do to secutity restriotion is won't run?????

How can you access the local system account in Windows 7

Re:
"in your first responce, why do you have to schedule cmd.exe to run via a schedule task in order to access the local system account. I'm a little confused on this part. "

answer: it's got to timing,

in windows 7, you'll have to run with elevated system rights or disable uaser access control.