Excerpt from: http://blog.csdn.net/shineorrain/article/details/18181707
LocalSystem Account
LocalSystem is a pre-set local account with all the privileges of the machine, which is not associated with the usual user account and does not have credentials such as a username and password. This service account can open the Hkey_local_machine\security key of the registry, and when LocalSystem accesses network resources, it is used as the domain account of the computer.
For example, the services running on the LocalSystem account are mainly: WindowsUpdate client, Clipbook, COM +, DHCP client, Messenger Service, Task Scheduler, Ser Ver service, Workstation service, and Windows Installer.
Network Service Account
The Network Service account is a pre-set local account that has partial permissions on the machine, and it can access the resources on the computer's behalf. But he does not have as many privileges as the local System, and the service running with this account submits the access credentials to the remote computer based on the actual environment. Network Service accounts typically have access to the network service, the Everyone group, and the resources that the authenticated user has access to.
For example, services running on the Network Service account are mainly: Distributed Transaction Coordinator, DNS Client, Performance Logs and Alerts, and There is an RPC Locator.
Local Service Account
The local service account is a pre-defined, locally-owned account with minimal permissions and is anonymous in the network credentials. Local service accounts typically have access to local service, the Everyone group, and resources that the authenticated user has access to.
For example, the services running on the local service account are: Alerter, Remote Registry, Smart Card, SSDP, and WebClient.
Brief description:
Local System: Native user, PC usually chooses this user
Network Service: Users of Web services, which usually require remote connections, use this
Local Service: on-premises services
Domain user
There is also a requirement to enter the user name password of the user is a domain user, this is a cluster when the choice of landing mode.
Windows account Type