What does 'Log on as a service' mean?

Hi,

I'd be grateful if someone could explain to me what 'Log on as a service' means and what the granting of this right brings to the accounbt that gets it - as compared to an account that does not have this right.

All the articles I find talk about how to set it up - but not what it exactly means and the impact it has.

Thank you for your help
DavidHannenAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

sirbountyCommented:
By default most services run as the LSA (local security authority aka SYSTEM account) or as a Network service (if they need remote access).
user account's aren't defined this way, by default, but can be modified in that manner if you have a service that requires elevated credentials beyond what is provided by the former.
Granting this permission to a user account gives that account the ability to register the corresponding service(s) and thus control starting/pausing/stopping said service.
Anytime, provided you have the correct permissions to modify it, you define a service to run under a user's credentials, that account is automatically granted the ability to "log on as a service".

If you bring up local security settings (or domain policies), you will see the 'explanation' as simply:  "This security setting determines which service accounts can register a process as a service."

Hope that helps.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DavidHannenAuthor Commented:
Thanks that is very useful.

I am trying to get a deeper ground up understanding of securtity in Windows - can you point me the direction of any good beginner and up type recources that will help me get to grips? The windows documentation always seems to expect a certain knowledge level.

Thanks

sirbountyCommented:
Not sure there is an easy answer for that one.  I've been working in IT for > 20 years, and I still don't have what I'd call a 'firm' grasp on security - it's an ever-moving target.  Best route would probably be to learn it from Microsoft.  If you're not in for the full mcse route approach, try their security course, or for a more generic approach - comptia's security + - they have a good 7-disc DVD series on it.  Good luck!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.