Machine.config file

From: Erich Cress (erich.cress@attbi.com)
Date: 01/14/03


From: "Erich Cress" <erich.cress@attbi.com>
Date: Tue, 14 Jan 2003 01:48:19 GMT


In a number of technical articles Microsoft cautions against changing the
username in the processmodel of the machine configuration file from
"machine" to "system", indicating that by doing so significant security
issues are created.

Microsoft does not give any specific examples of the security issues
created, however.

Can anyone provide specific examples of security concerns that the approach
described above would create?

 By Wednesday of this week I have to try to convince a number of
non-technical staff of the need to avoid using this approach.

Thanks