Hi security experts,

I read from here that:

On a local computer, an administrator can configure the application to run as Local Service, Network Service, or Local System. These service accounts are simple to configure and use but are typically shared among multiple applications and services and cannot be managed on a domain level.

I just don't understand why these accounts cannot be managed on a domain level, since they all have well-known SIDs?

Thanks for your time.