Windows Service Hardening and Application Testing

Discussion in 'Windows Vista Security' started by Harold, May 30, 2006.

  1. Harold

    Harold Guest

    Testing applications have begun and I am unclear how to configure Windows
    Service Hardening. It is the process of creating an user account for a
    service set specific ACLs for this account?

    Second Question, I just installed an application and a service is
    installed. The service runs under the localsystem token. How do I determine
    what that service needs access to? How do I move it to a locked down
    account?

    Thanks!
     
    Harold, May 30, 2006
    #1
    1. Advertisements

  2. Nice bit of info. here for you about WSH:
    http://www.microsoft.com/technet/windowsvista/evaluate/feat/secfeat.mspx#EHF

    If you want a service to run under the local system but a locked down
    account, use the NT_AUTHORITY\SYSTEM one. That should be OK :eek:)

    --
    Zack Whittaker
    » ZackNET Enterprises: www.zacknet.co.uk
    » MSBlog on ResDev: www.msblog.org
    » Vista Knowledge Base: www.vistabase.co.uk
    » This mailing is provided "as is" with no warranties, and confers no
    rights. All opinions expressed are those of myself unless stated so, and not
    of my employer, best friend, Ghandi, my mother or my cat. Glad we cleared
    that up!

    --: Original message follows :--
     
    Zack Whittaker, May 30, 2006
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.