>> However, SYSTEM doesn't have a shell, or many >> of the environment variables >> that user accounts generally have. > > Dave - Interesting. I did not know that. Offhand, do you know of articles > that talk more about the differences > between SYSTEM and regular user accounts? (If not, no problem. I can just > slog through the MS site later.)
I don't know of any offhand. I learned most of this by reading this book: http://www.amazon.com/Windows-Security-Guide-Stephen-Sutton/dp/0201419696 It's a Windows NT book, but the security model of Windows hasn't really changed significantly. The biggest change with regard to service security is that we now have security context with fewer privileges if we choose to use them (Local Service, Network Service). One other thing worth mentioning about SYSTEM is that it doesn't have any permissions for network resources. But anything that can be done on the local computer itself can be done by SYSTEM. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:345708 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

