On a fresh install of 2008 R2 I have "NT SERVICE\ALL SERVICES" listed in gpedit.msc for "Log on as a service". Where can I get more information about this account/group?

Just another request to MS for this info please as can't see anything documented on this one anywhere yet? It's in the default vanilla builds but doesn't translate to a SID when exported via secedit and also isn't listed in the well known SIDs article on Technet. Thanks in advance

I would love an answer as well.

I don't think we'll ever get an answer but I found this: http://winzerofaqs.blogspot.com/2009/04/unknown-sid-s-1-5-80-xxxxx.html. C:\sysinternals>psgetsid "NT SERVICE\ALL SERVICES" PsGetSid v1.44 - Translates SIDs to names and vice versa Copyright (C) 1999-2008 Mark Russinovich Sysinternals - www.sysinternals.com SID for NT SERVICE\ALL SERVICES: S-1-5-80-0 C:\sysinternals> So, I'm guessing every service account SID is a member of this group. It would be nice to see the document to back it up.

When i try to add "nt service\services" in the box. It says it cannot find it. Is there a way to do it with a script by chance?