Hmm, I've heard network service is a very reasonable thing to install as.  It 
has few permissions on the local machine but it can act as the machine on the 
network.  Our datacenter ops guys love network service because it doesn't 
require the password to be updated routinely the way an account requires.

LocalSystem on the other hand is the basically the same thing as Administrator 
and opens a really scary attack surface.

LocalService can't do much of anything interesting but is the safest (because 
it can't do much of anything).  <smile/>

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard
Sent: Thursday, May 22, 2008 21:36
To: WiX Users
Subject: Re: [WiX-users] service fail to install due to networkService account


In article <[EMAIL PROTECTED]>,
    zhisheng huang <[EMAIL PROTECTED]>  writes:

> Solved. The network service account needs to be specified with its domain.

Its generally bad practice to install services running as either local
system or network service.

The best practice is to create an account with only the permissions
that your service needs and install the service to run as this
account.

Most of the time, local system and network service have many more
privileges and permissions than your service needs.  Using your own
account allows you to control the permissions and privileges used by
your service explicitly instead of getting whatever implicit
privileges and permissions are associated with an existing account.
--
"The Direct3D Graphics Pipeline" -- DirectX 9 draft available for download
      <http://www.xmission.com/~legalize/book/download/index.html>

        Legalize Adulthood! <http://blogs.xmission.com/legalize/>

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to