Re: ODBC running as a service
- From: Hajo Kirchhoff <mailinglists.no.spam@xxxxxxxxxxxxxxxxx>
- Date: Sat, 20 Aug 2005 07:56:10 +0200
Lidiane Moreira wrote:
Thanks!
I was running as Local System Account. I changed it to the System administrator account, and now it works just fine.
Great to hear its working. But general security wisdom is, you should never run anything under System Adminstrator account unless it is really, really neccessary (which almost never is). The problem is, should your service get hacked (buffer overflow or whatever other vulnerability), a hacker will have system administrator rights. The best way to do this is to create a new local account with very limited access rights to run your service under, so should a hacker gain access via your service, the impact is very limited.
Think about it. Example: System Administrator has access to all files on your machine. Does your service really need to read all your word documents? Creating an account for only the service will automatically remove access rights to almost all files.
While it's certainly a hassle to create an extra account, its good (security) programming practice to do so and less difficult than one might think.
Best regards and glad to be of help
Hajo
--
-------------------------------------------- Lit Window Library - Speed up GUI coding 10x http://www.litwindow.com/library?src=ml
wxVisualSetup - integrate wxWidgets into Visual Studio .NET http://www.litwindow.com/Products/products.html?src=ml
BugLister - Defect Tracker http://www.litwindow.com/buglister?src=ml
Tips & Tricks for wxWidgets & MS Visual Studio http://www.litwindow.com/Knowhow/knowhow.html?src=ml .
- References:
- ODBC running as a service
- From: Lidiane Moreira
- Re: ODBC running as a service
- From: Hajo Kirchhoff
- Re: ODBC running as a service
- From: Lidiane Moreira
- ODBC running as a service
- Prev by Date: Unable to display Edit feature for Stored Procedures in VS2003 C#.
- Next by Date: SQL Server ODBC Database Reconnect questions
- Previous by thread: Re: ODBC running as a service
- Next by thread: Unable to display Edit feature for Stored Procedures in VS2003 C#.
- Index(es):
Relevant Pages
|
