Home > windows server 2008 > Are NT Authority Users Automatically Created

Are NT Authority Users Automatically Created

November 2Hits:2
Advertisement

TFS service module has a login option of NT_Authority\Network Service. If I select that, will TFS be able to login? Is the NT_Authority a group that I need to add users to? Or is NT_Authority\network service something that Windows handles automatically for me?

I just don't get what NT Authority is. It looks like (from google) that it is an automatically handled user that can start different services. If this is the case, how do I prevent all users on a machine from being able to access the TFS service module (since NT Authority exists for ALL users).

Sorry I don't get the basics of this bad boy.

Thanks!

Answers

They are not actual user accounts that are created. NetworkService and LocalService (and others) are special builtin identities that Windows uses to allow services to logon. Those two in particular are intended to let a service do its work with limited permissions and rights.

Also note that it is possible to configure a scheduled task to run as NT AUTHORITY\SYSTEM with no password on Windows 2003 (or just SYSTEM on Windows 2008).

You can use NetworkService for TFS. In fact, it is the default account that TFS uses during setup.

But be aware -- in TFS 2010, if you are using more than one server for your TFS deployment, you have to add the TFS Service account to the report server and as a farm admin on SharePoint. TFS install does this automatically if RS is on the TFS server (and if you let TFS install SharePoint during TFS installation, the SharePoint permissions are also dealt with automatically).

Here is the MSDN page that discusses all of this: http://msdn.microsoft.com/en-us/library/dd578625.aspx

Related Articles

Copyright (C) 2018 ceus-now.com, All Rights Reserved. webmaster#ceus-now.com 14 q. 0.712 s.