Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to create a user account in Windows 7 that has the same permissions as LocalService?

I need this for debugging purposes: I am debugging windows services by running my service as console application.

In the interactive/console mode you can not impersonate such kind of user as LocalService (there are some tricks, but they are unreliable and can be deleted from upcoming releases).

share|improve this question
Would kindly you edit your question to detail which problem[s] you're trying to solve? – jscott Jun 12 '12 at 0:36

I'm going to answer this as a purely "technically right" answer. As @jscott eludes to in his comment, your real reasons for wanting this would likely get you a better answer that fits your needs.

Being "LocalService" means having a specific well-known SID. It's not like being a member of a group. The best you could hope for would be to modify all the ACLs where "LocalService" is named to include the SID of a user or group. That would, effectively, give that user or group the "same permissions" as LocalService. If there are any places in Windows where checks for the LocalService are hard-coded, rather than ACLs, there would be no way to add an equivalent ACE without modifying the code.

share|improve this answer
Evan, what do you mean saying "to modify all the ACLs where "LocalService" is named"? Sorry, i'm programmer, not sysadmin. Can you give examples, please? – Tror Jun 12 '12 at 7:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.