B.1 Sentinel Services; B.2 Introduction To Service Logon Accounts - Novell SENTINEL 6.1 SP2 - REFERENCE GUIDE 02-2010 Reference Manual

Sentinel Service Logon Account
B
The purpose of this document is to describe in detail of how to set up Sentinel service logon account
as NT AUTHORITY\NetworkService instead of Domain user account. This has been tested on the
Windows 2003 platform only.

B.1 Sentinel Services

Sentinel Services should be set to run in order to use Sentinel application. To run a service you need
to login to the machine where Sentinel is installed using a logon Account. The different logon
accounts and advantages of using a logon account are discussed in this document.

B.2 Introduction to Service Logon Accounts

A service must log on to an account to access resources and objects on the operating system. If you
select an account that does not have permission to log on as a service, the Services snap-in
automatically grants that account the user rights that are required to log on as a service on the
computer that you are managing. However, this does not guarantee that the service will start. For
example, it is recommended that the user accounts that are used to log on as a service have the
Password never expires check box selected in their properties dialog box and that they have strong
passwords. If account lockout policy is enabled and the account is locked out, the service will
malfunction.
The following table describes the service logon accounts and how they are used.
Usage of Service Logon Accounts
Table B-1
Logon Account
Local System Account
Description
The Local System account is a powerful account that has full access to the
system, including the directory service on domain controllers. If a service
logs onto the Local System account on a domain controller, that service
has access to the entire domain. Some services are configured by default
to log on to the Local System account. Do not change the default service
setting.
Local System account is a predefined local account that is used to start a
service and provide the security context for that service. The name of the
account is NT AUTHORITY\System. This account does not have a
password and any password information that you supply is ignored. The
Local System account has full access to the system, including the directory
service on domain controllers. Because the Local System account acts as
a computer on the network, it has access to network resources.
Sentinel Service Logon Account
B
193