Mar 21, 2017 But that is not the issue. I know how to add the right the problem is that when I type in nt serviceall services it will not find that account. See screenshots in original question. Does this have to be done in a GPO or is this a local account? Thanks for your help. Monday, March 20, 2017 4:08 PM.
I can find many info on what is 'NT AUTHORITY' slash 'something'. Same for 'NT SERVICE'. But not for the part before the slash. I run into them from time to time in my work. I might receive documentation with, e.g. Domain Admins, which sometimes includes users from these 2 'places' (NT AUTHORITYSYSTEM or NT SERVICEMSSQLSERVER). So I understand they are some kind of standard users.
So I'd actually like to understand what is that core thing before the slash. Is it somehow connected to Windows NT, because it doesn't seem so? What the heck with those 'NT' letters? Is the Authority and the Service of the same level stuff?
ZygD
ZygDZygD69722 gold badges88 silver badges3232 bronze badges
1 Answer
If you're willing to play a little fast and loose with the definitions, NT_AUTHORITY essentially refers to the Windows operating system itself. Or perhaps as 'things the OS authorizes on your behalf.'
(At first, NT meant New Technology, a version of the OS generally meant for businesses. It contrasted with the less strict, less secure Windows 9.x kernels used in Windows 98, 98, and earlier versions. Starting with Windows 2000, the various versions were combined on a version based on Windows NT 4. Those eventually grew into Windows Vista, 7, 8.x, and the soon to be released 10.
The 'NT' token is basically a legacy token left from earlier times. You can think of it as a surrogate for Windows itself. More officially, it's the parent for a set of service users that handle background tasks and maintenance operations.
The tokens on the right side of the slash refer to individual internal service 'users' of the OS.For example, NT AUTHORITYSYSTEM handles system services, NT AUTHORITYLOCAL SERVICE does local services, NT AUTHORITYNETWORK SERVICE is network services, and so on. More background can be found in this thread and on various locations of MSDN. A creative use of your preferred search engine can help you find even more.
Essentially the same thing run on behalf of a service, which is (essentially) a utility that runs in the background. (The BITS service, for example, downloads updates in the background.) There are an awful lot of services that run and the token NT_SERVICE is used as a way to distinguish them from other things. Here an article that goes into a bit more technical detail. (I wouldn't turn off any services unless you know precisely what it's for, though. That's a good way to goof things up.)
ZygD69722 gold badges88 silver badges3232 bronze badges
Lance LeonardLance Leonard
Not the answer you're looking for? Browse other questions tagged windowssql-serverwindows-server or ask your own question.
Trying To setup WSUS on my RODC server and its giving me errors. I found many people that said you needed to create security groups.
1.SQLServer2005MSFTEUser$Servername$Microsoft##SSEE
2.SQLServer2005MSSQLUser$Servername$Microsoft##SSEE
Note: Servername= RODC server name
However This only fixed half of the issues. It gets passed created group WSUS Administrators now, but is still getting stuck on WSUS Reporters. Have tried several other fixes but to no avail. Any help would be great! Thanks!
Edited by computerguy101, 13 February 2015 - 04:01 PM.