RE: Isolating Windows Applications

From: Benjamin Meade (ben@lanwest.com.au)
Date: 04/08/03

  • Next message: Thane Walkup: "RE: SUS server" 
    From: "Benjamin Meade" <ben@lanwest.com.au>
To: <focus-ms@securityfocus.com>
Date: Tue, 8 Apr 2003 11:28:03 +0800

    Is a service more secure than a standard app, or is just easier to
    manage?

    Benjamin Meade
    System Administrator
    LanWest Pty Ltd

    -----Original Message-----
    From: James Ruddy [mailto:james.ruddy@jrcsonline.com]
    Sent: Tuesday, 8 April 2003 11:19 AM
    To: 'Juan José Sánchez Mesa'; focus-ms@securityfocus.com
    Subject: RE: Isolating Windows Applications

    Juan,

    I am running a similar setup as we speak. I have the console app run as
    a very low privileged user. The second step I took was to notify the
    business unit, management and the app vendor that the application needs
    to be written as a service.

    Hope this helps.

    Jim

    -----Original Message-----
    From: Juan José Sánchez Mesa [mailto:juanjo.listas@dobleJ.net]
    Sent: Monday, April 07, 2003 13:52
    To: focus-ms@securityfocus.com
    Subject: Isolating Windows Applications

    (sorry for my bad enlish)

    A client wants to run an application in one of our internet server. The
    application is made by themselves. It's a console application which
    listen
    in one tcp/ip port for conections from a client application.

    We want to protect our server, isolating the application so it can't
    access
    critical files, the registry, listen on more than one tcp/ip port (only
    in
    which is designated to listen), etc ... And if it's possible, protect
    the
    server if the application crash. The server is a Windows 2000 Server
    (SP3).

    Anyone knows a program that isolate other programs in this way ? It's
    possible do this using a user with low privileges and running the
    applicaction as this user ?

    Ideas, tricks ... ???

    Thanks for the replies.

    <b>
    ----------------------------------------------------------------------
    Block Spam, Smut & Viruses
    SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers
    of
    technology including filtering embedded and attached file content. Rid
    your
    enterprise of unwanted content.
    http://www.securityfocus.com/SurfControl-focus-ms2
    Download your free fully functional trial, complete with 30-days of free
    technical support.
    ----------------------------------------------------------------------
    </b>

    <b>
    ----------------------------------------------------------------------
    Block Spam, Smut & Viruses
    SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers
    of
    technology including filtering embedded and attached file content. Rid
    your
    enterprise of unwanted content.
    http://www.securityfocus.com/SurfControl-focus-ms2
    Download your free fully functional trial, complete with 30-days of free
    technical support.
    ----------------------------------------------------------------------
    </b>

    <b>
    ----------------------------------------------------------------------
    Block Spam, Smut & Viruses
    SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers of
    technology including filtering embedded and attached file content. Rid your
    enterprise of unwanted content.
    http://www.securityfocus.com/SurfControl-focus-ms2
    Download your free fully functional trial, complete with 30-days of free
    technical support.
    ----------------------------------------------------------------------
    </b>

  • Next message: Thane Walkup: "RE: SUS server"