App Control: Windows Accounts vs. CBP Service Accounts

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What do the service accounts in Windows translate to in the App Control console settings options?

Environment

• App Control: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

• Authenticated users: Anyone authenticated either to the local machine, or the domain and only on Windows machines. 
• Backup Operators: Backup Operators group. 
• Local Administrators: Local Administrator group. 
• Local service: NT Authority\LOCAL SERVICE 
• Local System: NT Authority\SYSTEM 
• Network Configuration Operators: Local Windows Network Configuration Operators group members 
• Network service: NT Authority\NETWORK SERVICE 
• Power Users: Local Windows Power Users group members 
• Service Accounts: Anything that authenticates as a service. Which correlates to the Local Security policy of "Logon as Service"