Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

Impersonating user security context from NT AUTHORITY\NetworkService

Avatar of kkamm
kkammFlag for United States of America asked on
SecurityVulnerabilitiesOS Security
11 Comments1 Solution1915 ViewsLast Modified:
I have a system service which needs to make SQL queries to a server on our domain. This service also needs to write to a local event log, as well as update the local registry. I need an account for this service that is appropriate for a system service, but also allows it access to the functions mentioned above.

The NT AUTHORITY\NetworkService account has been suggested for a typical network aware service, but I get errors when attempting any local operations.

What I was considering is running the service under the  NT AUTHORITY\NetworkService account but temporarily running in a standard user context via impersonation to do any local operations.

My question is:
How much safer is it to temporarily run in a more privileged context from a less privileged one using impersonation?  What is the functional difference between running in the more privileged context from the start as opposed to impersonating  a more privileged  context from a less privileged one?
Avatar of Rich Rumble
Rich RumbleFlag of United States of America imageSecurity Samurai
This problem has been solved!
Unlock 1 Answer and 11 Comments.
See Answers