security question...

From: Ollie Riches (ollie.riches_at_phoneanalyser.net)
Date: 09/19/05 

Date: Mon, 19 Sep 2005 19:06:51 +0100

We have a windows media licensing sever that is generating licenses and
delivering them via HTTPHandler inside an asp.net website, we have
configured this to run under a secure domain account as described in MSDN.

But the problem we have encountered is that it appears the licensing server
requires local admin rights to work correctly - when we added the domain
account to the local admin group then everything worked correctly. I guess
that by adding the domain account to the local admin groupt we have now
granted the correct permissions to access the registry or another sensitive
resource on the server (windows 2003).

Can anyone tell me what permissions I would have to granted to what objects
so that we don't have to run the website in question with local admin
rights?

Oh and before anyone says it I do know that granting local admin rights is a
rather large security whole :)

Cheers and thanks inadvance

Ollie Riches

Relevant Pages

  • Re: Do you consider this software licensing practice ethical? I am furious!
    ... without eating up resources if they do not format their hard ... and at the end of a FAQ "printed clearly" on the website? ... because I normally do use a repair install or a restore point ... else's quilting software that has what you regard as a better licensing policy. ...
    (misc.consumers)
  • RE: cost of Core Impact, Immunity Canvas
    ... There is also per-IP licensing for Impact. ... >Audit your website security with Acunetix Web Vulnerability Scanner: ... >Hackers are concentrating their efforts on attacking ... Up to 75% of cyber attacks are launched on shopping ...
    (Pen-Test)
  • Re: Advice on licencing
    ... SBS Premium licensing allows you to backend a website using SQL without ... I suggest you call MS licensing. ... Javier [SBS MVP] ... > clients to interact with a SQL Server OLTP database held on the SBS2003 ...
    (microsoft.public.windows.server.sbs)
  • Re: ASP.NET assemblies - running under a specific URL
    ... Screen request URLs for a permitted list of sites. ... Implement a licensing mechanism. ... assemblies, and anyone who is willing to ignore contractual and/or licensing ... > assembly to another website. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Domain Administrator password?
    ... thanks for your link and hlep. ... I was trying to reply to this but the website ... requires the local admin password. ... Admin password as well as Exchange Admin's. ...
    (microsoft.public.windows.server.general)