title: Why running a service as Local System is bad on windows?
body: <p>I am trying to find out the difference between difference service account types. I tumbled upon this question. </p>
  
  <p>The answer was because it has powerful access to local resources, and Network Service should be used if possible. </p>
  
  <p>But still I am not able to understand that if it has powerful access to local resources, how attacker can access the account? What are the ways to compromise the account? I understood it is all about security, but I don't know how. It could be dark hacker's world, however anybody could explain, in simple terms, why network service account is better than local account ? </p>
  
  <p>Thanks in advance.</p>