none
NT SERVICE\ALL SERVICES?!?!

    Question

  • On a fresh install of 2008 R2 I have "NT SERVICE\ALL SERVICES" listed in gpedit.msc for "Log on as a service".  Where can I get more information about this account/group? 
    Tuesday, May 18, 2010 11:50 PM

All replies

  • Just another request to MS for this info please as can't see anything documented on this one anywhere yet?

    It's in the default vanilla builds but doesn't translate to a SID when exported via secedit and also isn't listed in the well known SIDs article on Technet.

    Thanks in advance

    Tuesday, June 15, 2010 4:10 PM
  • I would love an answer as well.
    Tuesday, July 20, 2010 5:30 PM
  • I don't think we'll ever get an answer but I found this: http://winzerofaqs.blogspot.com/2009/04/unknown-sid-s-1-5-80-xxxxx.html.

    C:\sysinternals>psgetsid "NT SERVICE\ALL SERVICES"
    
    PsGetSid v1.44 - Translates SIDs to names and vice versa
    Copyright (C) 1999-2008 Mark Russinovich
    Sysinternals - www.sysinternals.com
    
    SID for NT SERVICE\ALL SERVICES:
    S-1-5-80-0
    
    
    C:\sysinternals>
    
    So, I'm guessing every service account SID is a member of this group.  It would be nice to see the document to back it up.

    Tuesday, July 20, 2010 6:03 PM
  • When i try to add "nt service\services" in the box. It says it cannot find it.

     

    Is there a way to do it with a script by chance?

    Wednesday, November 17, 2010 5:18 PM
  • Membership is controlled by the operating system - http://support.microsoft.com/kb/243330

    Chuck Timon Senior, Support Escalation Engineer (SEE) Windows 8 Beta Engineer Microsoft Corporation

    Monday, December 31, 2012 2:04 PM
    Moderator
  • Hi, it is: NT SERVICE\ALL SERVICES

    JR

    Thursday, August 07, 2014 11:02 AM
  • Do it on your domain controller
    Monday, August 29, 2016 12:25 PM