Local Service and Network Service in ServiceCredDlg

57 views
Skip to first unread message

Стас Донцов

unread,
Mar 23, 2016, 4:47:27 AM3/23/16
to msiext
How can I select Local Service or Network Service in ServiceCredDlg? There is no Built-in security principal in Object types dialog, hence I can not find it. I tried setting it manually in Account text box to "NT AUTHORITY\NetworkService", but Test Credentials doesn't pass.

Daniel Doubrovkine

unread,
Mar 23, 2016, 8:20:10 AM3/23/16
to msi...@googlegroups.com
If I remember correctly, logon as local system was supported here out of the box, giving you SERVICE_LOGON_TYPE = ServiceLocalSystem, but not network and local service which were added more recently. I think this will need work.

On Wed, Mar 23, 2016 at 4:47 AM, Стас Донцов <dsa...@gmail.com> wrote:
How can I select Local Service or Network Service in ServiceCredDlg? There is no Built-in security principal in Object types dialog, hence I can not find it. I tried setting it manually in Account text box to "NT AUTHORITY\NetworkService", but Test Credentials doesn't pass.

--
You received this message because you are subscribed to the Google Groups "msiext" group.
To unsubscribe from this group and stop receiving emails from it, send an email to msiext+un...@googlegroups.com.
To post to this group, send email to msi...@googlegroups.com.
Visit this group at https://groups.google.com/group/msiext.
For more options, visit https://groups.google.com/d/optout.



--

Стас Донцов

unread,
Mar 23, 2016, 10:18:47 AM3/23/16
to msiext
I managed to add network and local services into Object Types by adding DSOP_DOWNLEVEL_FILTER_NETWORK_SERVICE nad DSOP_DOWNLEVEL_FILTER_LOCAL_SERVICE to DSOP_DOWNLEVEL_SCOPE_FILTER_FLAGS for now. Now I can find them but test credential isn't working.

среда, 23 марта 2016 г., 17:20:10 UTC+5 пользователь Daniel Doubrovkine написал:

Daniel Doubrovkine

unread,
Mar 23, 2016, 10:28:18 AM3/23/16
to msi...@googlegroups.com
That would make sense since you can't test an actual logon for those. Likely should be disabled.
Reply all
Reply to author
Forward
0 new messages