windows service hardening application testing

Testing applications have begun and I am unclear how to configure Windows Service Hardening. It is the process of creating an user account for a service set specific ACLs for this account?
Second Question, I just installed an application and a service is installed. The service runs under the localsystem token. How do I determine what that service needs access to? How do I move it to a locked down account?
Thanks!

Nice bit of info. here for you about WSH: http://www.microsoft.com/technet/windowsvista/evaluate/feat/secfeat.mspx#EHF
If you want a service to run under the local system but a locked down account, use the NT_AUTHORITY\SYSTEM one. That should be OK :o)
-- Zack Whittaker » ZackNET Enterprises: www.zacknet.co.uk » MSBlog on ResDev: www.msblog.org » Vista Knowledge Base: www.vistabase.co.uk » This mailing is provided "as is" with no warranties, and confers no rights. All opinions expressed are those of myself unless stated so, and not of my employer, best friend, Ghandi, my mother or my cat. Glad we cleared that up!
--: Original message follows :-- "Harold" wrote in message

Testing applications have begun and I am unclear how to configure Windows Service Hardening. It is the process of creating an user account for a service set specific ACLs for this account?
Second Question, I just installed an application and a service is installed. The service runs under the localsystem token. How do I determine what that service needs access to? How do I move it to a locked down account?
Thanks!