How do I specify NetworkService LocalService for a Windows Service on a Domain Controller?
This question is a not duplicate of these existing questions:
AUTHORITYNetworkService does not exist (question is for Windows Server 2003
How can I run a process as "NT AuthorityNetworkService"? (this is a scripting question)
https://stackoverflow.com/questions/34966029/adding-permissions-for-nt-authority-networkservice (this is about adding anNT AUTHORITYprincipal to an ACL, not selecting a principal in the Find User GUI)
I have a Windows Service configured on different computers:
- A workstation (non-domain) computer (running Windows 10)
- A workstation (non-domain) Windows Server (running Windows Server 2016)
- A domain workstation (running Windows 10)
- A domain member server (running Windows Server 2016)
- A domain controller (running Windows Server 2016)
In all computers except the domain controller, the services.msc > Service Properties > Log On property sheet's "Select User" pop-up lets me select the NT AUTHORITY built-in principals NETWORK SERVICE and LOCAL SERVICE (aka NT AUTHORITYNetworkService and NT AUTHORITYLocalService).
If I ignore the Search Users window and just type "network service" into the Select User window and click "Check Names" then it's correctly resolved to NETWORK SERVICE:
However, on this Windows Server 2016 domain controller, the Select User popup does not let me specify any local computer name (which makes sense: the local computer's security system becomes the domain security system).
...which means it's not possible to resolve, search for or select NETWORK SERVICE or LOCAL SERVICE:
When I type it in directly into the Log On tab then I get this error:
The account name is invalid or does not exist, or the password is invalid for the account name specified.
domain service users
asked 5 hours ago
DaiDai
1,02661635
add a comment |
This question is a not duplicate of these existing questions:
AUTHORITYNetworkService does not exist (question is for Windows Server 2003
How can I run a process as "NT AuthorityNetworkService"? (this is a scripting question)
https://stackoverflow.com/questions/34966029/adding-permissions-for-nt-authority-networkservice (this is about adding anNT AUTHORITYprincipal to an ACL, not selecting a principal in the Find User GUI)
I have a Windows Service configured on different computers:
- A workstation (non-domain) computer (running Windows 10)
- A workstation (non-domain) Windows Server (running Windows Server 2016)
- A domain workstation (running Windows 10)
- A domain member server (running Windows Server 2016)
- A domain controller (running Windows Server 2016)
In all computers except the domain controller, the services.msc > Service Properties > Log On property sheet's "Select User" pop-up lets me select the NT AUTHORITY built-in principals NETWORK SERVICE and LOCAL SERVICE (aka NT AUTHORITYNetworkService and NT AUTHORITYLocalService).
If I ignore the Search Users window and just type "network service" into the Select User window and click "Check Names" then it's correctly resolved to NETWORK SERVICE:
However, on this Windows Server 2016 domain controller, the Select User popup does not let me specify any local computer name (which makes sense: the local computer's security system becomes the domain security system).
...which means it's not possible to resolve, search for or select NETWORK SERVICE or LOCAL SERVICE:
When I type it in directly into the Log On tab then I get this error:
The account name is invalid or does not exist, or the password is invalid for the account name specified.
domain service users
asked 5 hours ago
DaiDai
1,02661635
add a comment |
This question is a not duplicate of these existing questions:
AUTHORITYNetworkService does not exist (question is for Windows Server 2003
How can I run a process as "NT AuthorityNetworkService"? (this is a scripting question)
https://stackoverflow.com/questions/34966029/adding-permissions-for-nt-authority-networkservice (this is about adding anNT AUTHORITYprincipal to an ACL, not selecting a principal in the Find User GUI)
I have a Windows Service configured on different computers:
- A workstation (non-domain) computer (running Windows 10)
- A workstation (non-domain) Windows Server (running Windows Server 2016)
- A domain workstation (running Windows 10)
- A domain member server (running Windows Server 2016)
- A domain controller (running Windows Server 2016)
In all computers except the domain controller, the services.msc > Service Properties > Log On property sheet's "Select User" pop-up lets me select the NT AUTHORITY built-in principals NETWORK SERVICE and LOCAL SERVICE (aka NT AUTHORITYNetworkService and NT AUTHORITYLocalService).
If I ignore the Search Users window and just type "network service" into the Select User window and click "Check Names" then it's correctly resolved to NETWORK SERVICE:
However, on this Windows Server 2016 domain controller, the Select User popup does not let me specify any local computer name (which makes sense: the local computer's security system becomes the domain security system).
...which means it's not possible to resolve, search for or select NETWORK SERVICE or LOCAL SERVICE:
When I type it in directly into the Log On tab then I get this error:
The account name is invalid or does not exist, or the password is invalid for the account name specified.
domain service users
asked 5 hours ago
DaiDai
1,02661635
This question is a not duplicate of these existing questions:
AUTHORITYNetworkService does not exist (question is for Windows Server 2003
How can I run a process as "NT AuthorityNetworkService"? (this is a scripting question)
https://stackoverflow.com/questions/34966029/adding-permissions-for-nt-authority-networkservice (this is about adding anNT AUTHORITYprincipal to an ACL, not selecting a principal in the Find User GUI)
I have a Windows Service configured on different computers:
- A workstation (non-domain) computer (running Windows 10)
- A workstation (non-domain) Windows Server (running Windows Server 2016)
- A domain workstation (running Windows 10)
- A domain member server (running Windows Server 2016)
- A domain controller (running Windows Server 2016)
In all computers except the domain controller, the services.msc > Service Properties > Log On property sheet's "Select User" pop-up lets me select the NT AUTHORITY built-in principals NETWORK SERVICE and LOCAL SERVICE (aka NT AUTHORITYNetworkService and NT AUTHORITYLocalService).
If I ignore the Search Users window and just type "network service" into the Select User window and click "Check Names" then it's correctly resolved to NETWORK SERVICE:
However, on this Windows Server 2016 domain controller, the Select User popup does not let me specify any local computer name (which makes sense: the local computer's security system becomes the domain security system).
...which means it's not possible to resolve, search for or select NETWORK SERVICE or LOCAL SERVICE:
When I type it in directly into the Log On tab then I get this error:
The account name is invalid or does not exist, or the password is invalid for the account name specified.
domain service users
domain service users
asked 5 hours ago
DaiDai
1,02661635
asked 5 hours ago
DaiDai
1,02661635
asked 5 hours ago
DaiDai
1,02661635
asked 5 hours ago
DaiDai
1,02661635
asked 5 hours ago
DaiDai
1,02661635
1,02661635
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
You need to add "Built-in security principal" to your Object Types when doing this on the Domain Controller. As it is, you're only searching for User and Service Account Object Types.
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
add a comment |
Based on your final screenshot, you left out the space in the account name. Try Local Service instead.
If that doesn't work, you can do it on the command line as shown here, I would write this as:
sc config ServiceName obj= "NT AUTHORITYLocal Service" password= ""
Note that in the command line version either LocalService or Local Service is acceptable, but in the GUI only the latter works. I'm not sure why, but that's the way it is.
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e) {
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom)) {
StackExchange.using('gps', function() { StackExchange.gps.track('embedded_signup_form.view', { location: 'question_page' }); });
$window.unbind('scroll', onScroll);
}
};
$window.on('scroll', onScroll);
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f952509%2fhow-do-i-specify-networkservice-localservice-for-a-windows-service-on-a-domain-c%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
You need to add "Built-in security principal" to your Object Types when doing this on the Domain Controller. As it is, you're only searching for User and Service Account Object Types.
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
add a comment |
You need to add "Built-in security principal" to your Object Types when doing this on the Domain Controller. As it is, you're only searching for User and Service Account Object Types.
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
add a comment |
You need to add "Built-in security principal" to your Object Types when doing this on the Domain Controller. As it is, you're only searching for User and Service Account Object Types.
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
You need to add "Built-in security principal" to your Object Types when doing this on the Domain Controller. As it is, you're only searching for User and Service Account Object Types.
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
edited 1 hour ago
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
answered 1 hour ago
joeqwertyjoeqwerty
96k463149
96k463149
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
add a comment |
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
"Built-in security principal" is not listed. Only "Computers" and "Users and Service Accounts" are listed as options.
– Dai
45 mins ago
add a comment |
Based on your final screenshot, you left out the space in the account name. Try Local Service instead.
If that doesn't work, you can do it on the command line as shown here, I would write this as:
sc config ServiceName obj= "NT AUTHORITYLocal Service" password= ""
Note that in the command line version either LocalService or Local Service is acceptable, but in the GUI only the latter works. I'm not sure why, but that's the way it is.
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
add a comment |
Based on your final screenshot, you left out the space in the account name. Try Local Service instead.
If that doesn't work, you can do it on the command line as shown here, I would write this as:
sc config ServiceName obj= "NT AUTHORITYLocal Service" password= ""
Note that in the command line version either LocalService or Local Service is acceptable, but in the GUI only the latter works. I'm not sure why, but that's the way it is.
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
add a comment |
Based on your final screenshot, you left out the space in the account name. Try Local Service instead.
If that doesn't work, you can do it on the command line as shown here, I would write this as:
sc config ServiceName obj= "NT AUTHORITYLocal Service" password= ""
Note that in the command line version either LocalService or Local Service is acceptable, but in the GUI only the latter works. I'm not sure why, but that's the way it is.
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
Based on your final screenshot, you left out the space in the account name. Try Local Service instead.
If that doesn't work, you can do it on the command line as shown here, I would write this as:
sc config ServiceName obj= "NT AUTHORITYLocal Service" password= ""
Note that in the command line version either LocalService or Local Service is acceptable, but in the GUI only the latter works. I'm not sure why, but that's the way it is.
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
answered 3 hours ago
Harry JohnstonHarry Johnston
3,63912037
3,63912037
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e) {
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom)) {
StackExchange.using('gps', function() { StackExchange.gps.track('embedded_signup_form.view', { location: 'question_page' }); });
$window.unbind('scroll', onScroll);
}
};
$window.on('scroll', onScroll);
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f952509%2fhow-do-i-specify-networkservice-localservice-for-a-windows-service-on-a-domain-c%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e) {
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom)) {
StackExchange.using('gps', function() { StackExchange.gps.track('embedded_signup_form.view', { location: 'question_page' }); });
$window.unbind('scroll', onScroll);
}
};
$window.on('scroll', onScroll);
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e) {
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom)) {
StackExchange.using('gps', function() { StackExchange.gps.track('embedded_signup_form.view', { location: 'question_page' }); });
$window.unbind('scroll', onScroll);
}
};
$window.on('scroll', onScroll);
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e) {
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom)) {
StackExchange.using('gps', function() { StackExchange.gps.track('embedded_signup_form.view', { location: 'question_page' }); });
$window.unbind('scroll', onScroll);
}
};
$window.on('scroll', onScroll);
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
