“NT SERVICE\ServiceName"的 LOGON32_LOGON_SERVICE [英] LOGON32_LOGON_SERVICE for "NT SERVICE\ServiceName

问题描述

LOGON32_LOGON_SERVICE 可用于为内置服务帐户创建登录网络服务、本地服务、SYSTEM:

LOGON32_LOGON_SERVICE can be used to create logon for built-in service accounts Network Service, Local Service, SYSTEM:

LogOnUser("SYSTEM", "NT AUTHORITY", nullptr, LOGON32_LOGON_SERVICE, LOGON32_PROVIDER_WINNT50, &token);

是否可以为NT SERVICE\ServiceName"创建登录?当我尝试这个时:

Is it possible to create a logon for "NT SERVICE\ServiceName"? When I try this:

LogOnUser("SomeService", "NT SERVICE", nullptr, LOGON32_LOGON_SERVICE, LOGON32_PROVIDER_WINNT50, &token);

我明白了:

用户名或密码不正确".

推荐答案

我必须在这里假设没有.我在任何地方都看不到任何支持使用虚拟帐户登录的文档，只能在服务 (CreateService) 的设置中使用它们并分配给 IIS 应用程序池.

I have to assume no here. I can't see any docs anywhere to support logging in with Virtual Accounts, only using them in the setup for a service (CreateService) and assigning to IIS App Pool.

一个文档似乎有点不合适，因为这篇文章提到了在安装时创建的虚拟帐户，但我认为它们实际上是指分配给服务 - 因为虚拟帐户无法被创建.https://support.microsoft.com/en-us/kb/2832204

One doc seems a bit out of place since this article refers to a virtual account created on install but I think they really mean assigned to the service - since virtual accounts cannot be created. https://support.microsoft.com/en-us/kb/2832204

安装 WID 时，会创建 NT SERVICE\MSSQL$MICROSOFT##WID 本地虚拟帐户"

"When WID is installed, the NT SERVICE\MSSQL$MICROSOFT##WID local virtual account is created"

因为没有其他任何地方的文档提到这一点 - 我必须同意这是不可能的.

Since no other docs anywhere mention this - I have to concur this isn't possible.

您在这里运行的是一种特殊类型的帐户，其目的是单一的.

You are running a special type of account here that has a single purpose.

这篇关于“NT SERVICE\ServiceName"的 LOGON32_LOGON_SERVICE的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！