question

SteinJonathan-3440 avatar image
0 Votes"
SteinJonathan-3440 asked MotoX80 commented

Identifying what the literal input of".\" means for windows Service

We had a typo where someone entered ".\" as a account for a service logon. We are trying to determine what this resolves as. I know "." means "this", but there is no user name included as evident in picture attached. It did not have a password entered, and even showed the dialog stating it was added to log on as a service right.

Is this just a parsing flaw, or does ".\" resolve to an internal principal?

117522-capture.png




windows-server
capture.png (2.2 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI

I agree with Mr DSPatrick.

Do you have other question?

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered MotoX80 commented

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I think there is a good understanding of what was going on. It doesn't appear that ".\" maps to anything and the validation performed by SC doesn't do anything if the fields are empty for down level names. For example, i am able to enter ".\" and "\" with same result. I wanted to know if those were shorthand for any local reference, but it appears just a flaw allow registry updates to show the values

0 Votes 0 ·
MotoX80 avatar image MotoX80 SteinJonathan-3440 ·

If you check User Rights Assignment you will see that SID S-1-5-32-4294967295 was added to "Log on as service", but it does not map to any account. S-1-5-32 indicates a builtin account, and 4294967295 happens to be FFFF FFFF in hex.

It appears to be just an oddity that perhaps no one ever tested before.

1 Vote 1 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered

Ok, yea nothing more than "localhost"

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered SteinJonathan-3440 commented

Not really enough info. Just appears to be someone's error.





· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I'm aware someone messed up, I got this info from a report of a failed service. I'm more trying to figure out if ".\" is a valid reference, and if so, to what.

0 Votes 0 ·