Re: IIS Security

I second Thor's request. I, too, would like to know the product..

Matt Wagenknecht
Security Consultant
Special Ops Security
www.specialopssecurity.com


On Tue, 2006-10-31 at 17:30 -0700, Thor (Hammer of God) wrote:
Please publish the name of the company and the name of the product.

Thanks.
t


On 10/27/06 7:53 AM, "alex2@xxxxxxxxxxxxxx" <alex2@xxxxxxxxxxxxxx> spoketh
to all:

We've a vertical package that includes a web based portal. (quite common for
many Enterprise packages)

The problem lies in some of the requirements that the company puts on running
this portal.

The major one is that of adding the IUSR_machinename account to the local
admin group.
I know this is horrible, but need specific reasons why this shouldn't be done
so that I can bring it to my boss and get it fixed.

Thanks

---------------------------------------------------------------------------
---------------------------------------------------------------------------






---------------------------------------------------------------------------
---------------------------------------------------------------------------



---------------------------------------------------------------------------
---------------------------------------------------------------------------

Quantcast