|
You can choose under which account the service runs. Most services run under the special LocalSystem account, which is the default option for services. You can set the service to log on under another account by opening the Account tab on the Service property sheet, and typing the account information.
If you choose to run the service under an account other than LocalSystem, that account must have the Log On As A Service privilege. This can be granted from the Windows User Manager application under Advanced Privileges. The Service utility (dbsvc) also grants this privilege if it is required.
If a service runs under LocalSystem, and Allow Service to Interact with Desktop is selected on the Service property sheet, an icon appears on the desktop of every user logged in to Windows on the computer running the service. Consequently, any user can open the application window and stop the program running as a service.
If a service runs under LocalSystem, and Allow Service to Interact with Desktop is cleared on the Service property sheet, no icon appears on the desktop for any user. Only users with permissions to change the state of services can stop the service.
If a service runs under another account, no icon appears on the desktop. Only users with permissions to change the state of services can stop the service.