views:

16

answers:

0

[1] informs:

  • Local System account. The name of this account is NT AUTHORITY\System. It is a powerful account that has unrestricted access to all local system resources. It is a member of the Windows Administrators group on the local computer

How to determine/check membership of "NT AUTHORITY\" account, such as

  • NT AUTHORITY\SYSTEM (Local System),
  • NT AUTHORITY\LOCAL SERVICE
  • NT AUTHORITY\NEWTWOK SERVICE

through code (C#, wmi/vbs)?

My discussion in forums determined that this membership is impossible to check by Windows commands or Windows GUI/tools.

The most detailed WMI/VBS scripts for determining group membership [2] does not help for "NT AUTHORITY\" account(s).

Cited:

[1]
Selecting an Account for the SQL Server Agent Service
(SQL Server 2008 R2)
http://msdn.microsoft.com/en-us/library/ms191543.aspx
[2] Richard Mueller Group Membership Tests http://www.rlmueller.net/freecode1.htm.