I've written a web-application to run on Windows (XP,7,2008, etc), not using MS tools (python/django/nginx, though it should not matter). To run the app I've created a Windows Service which installs and runs fine.
However, the application will run in an environment where security is important. By default the service installs itself running under the
Local System account, which I understand has full control of the computer. Doesn't sound like a good idea.
I've also seen
Network Service used but descriptions tend to talk about domains and such. This app uses the network and is running on Windows, but doesn't talk "Windows" much if at all. It is self contained and keeps its data in the "common app data folder" aka
...\All Users\Application Data though.
Should I use
Network Service? Should I create my own account? On unix I would, but not sure of the "gotchas" on Windows. Would be easier to use an existing account.