Wrote down the notes after solved an access issue [1, 2, ,3, 4].

LocalService NetworkService LocalSystem
Predefinied local account Yes, local authenticated users Yes, local authenticated users Yes
Privileges in local computer minimal, run standard least-privileged services minimal, run standard privileged services Extensive, have access to most system objects. Most services do not need such a high privilege level. If your service does not need these privileges, and it is not an interactive service, consider using the LocalService account or the NetworkService account.
Password No No No
Token NT Authority\System, Builtin\Administrators
Network identity Anonymous user* Act as the computer on the networks, computer’s credentials (computer$). By default, the remote token contains SIDs for the Everyone and Authenticated Users groups. Act as the computer on the networks, computer’s credentials (computer$)
Note By default, the Local System Account is a member of the local Administrators group and is therefore a member of the sysadmin group in SQL Server.

ATTN: * – Anonymous user is not equivalent to everyone. Everyone means a group of all authenticated users.



  1. https://msdn.microsoft.com/en-us/library/windows/desktop/ms684188(v=vs.85).aspx
  2. https://msdn.microsoft.com/en-us/library/windows/desktop/ms684272(v=vs.85).aspx
  3. https://msdn.microsoft.com/en-us/library/windows/desktop/ms684188(v=vs.85).aspx
  4. https://stackoverflow.com/questions/510170/the-difference-between-the-local-system-account-and-the-network-service-acco