The Weakness of Windows Impersonation Model

The Weakness of Windows Impersonation Model http://www.gentlesecurity.com/04302006.html Summary 1. Network Service account’s context is elevated to LocalSystem. 2. A context of MS SQL service running as unique user account is elevated up to LocalSystem. 3. Any service’s context could be elevated ...