Servers that use Domain Account to Start Services

Before I start a war within my department I want to get some pointers
and advice on how to handle this situation.

To make a loooooong story short, and believe me its long.

There are several servers on the domain which are using the Domain
Administrator to start services instead of using the local system
account. Let me just name a few Exchange Server, SQL Servers, Bentleys
ProjectWise, BackupExec, Trend Micro, etc. etc. All of these services
can and will start up using the local system account. Is there any
reason we should be using the administrator account to start services
on a server? I am having a really hard time trying to explain that they
will start up using the local account. I think the reasoning behind
this method is because some people feel its a permissions thing?

Richard C. MCSA

Network Administrator

.

Relevant Pages

  • Re: Access and roles in DCOM technology
    ... account should definitely not be. ... The 4 servers interact via DCOM technology. ... If this user is local administrator on 4 servers everything works ... > user so the DCOM technology will work between the servers? ...
    (microsoft.public.security)
  • Re: Local System Account
    ... administrator is not same as Local System. ... Since application runs as "Local System Account", ... It is _not_ common to run commands or tasks as Local System. ...
    (microsoft.public.win2000.security)
  • Re: MS Exchange Relay Authentication
    ... I've seen this on a few servers in various environments. ... The account was still named Administrator ... It seems that account passwords are being cracked. ...
    (NT-Bugtraq)
  • Re: Administrator Account Locking Out
    ... the Administrator account, or possibly our RADIUS server might be using it ... 2003 Servers and Windows 2000 servers. ... I have looked in both the event logs, turned on netlogon logging, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local System Account
    ... run following command from command line: ... Local System will also run as Local System. ... one can specify it to run as localsystem account. ... administrator is not same as Local System. ...
    (microsoft.public.win2000.security)