## Permissions

UNIX daemons usually get their permissions when a system process starts them at boot time. If they need to run with the permissions of another user, they can change their effective user and group, or the daemon executable itself can be Setuid or SetGid Permissions.

Windows NT services typically start using the system account. If the service needs different permissions or needs to access another computer, then the service can be configured to log on as a specific user. This is configurable through the Services utility on the Control Panel.

In Windows NT, the goal is usually to give the service fewer permissions than normal to prevent someone from gaining system permissions after exploiting a security hole.

©1997 Microsoft Corporation. All rights reserved. Legal Notices.
Last Updated: December 1, 1997