Microsoft® Windows® 2000 Security Handbook

Summary

In this chapter, you learned what Windows 2000 services actually are and how they interact with the system as a whole. You learned that the defining factors of services are that the SCM controls their scope and that they act independently of any user that might be logged onto the machine.

While exploring the security aspects of services, you learned about the use of the LocalSystem account as the service logon account and why you must carefully weigh the use of that account against the security implications. You observed that audit can and should be implemented to watch the actions of services. Finally, you looked at some service-specific security issues that benefit both administrators and developers.

The next chapter covers drivers ...