Re: When a service really starts

From: Bruce Parker (bparkerhsd_at_nospam.nospam)
Date: 03/05/05 

Date: Sat, 5 Mar 2005 10:21:02 -0800

Does this mean if I put the code in the constructor to change the logon
credentials it is too late?

In addition, this is not a security hole. A network administrator provides
this information via another secured application which is required by our
software. The service obtains this information from the secured application.
 Without going into details, it becomes a security risk if the logon
credentials does not match the one the network administrator provides in the
other application.

I need a definitive answer on this question.

"Sean Hederman" wrote:

> "Bruce Parker" <bparkerhsd@nospam.nospam> wrote in message
> news:F531A640-B232-45C7-95F3-E7876A1DD714@microsoft.com...
> >I have written a .NET Service. In the OnStart method, I am setting the
> > Services user name and password. Has the service already obtained this
> > information at this point and is using the existing information? Is this
> > the
> > right place to do this in the service's code?
>
> Yes, the Service Controller starts your process up with the credentials
> indicated. You don't have to change anything as far as that is concerned. In
> fact I would consider it a pretty serious security hole to have a service
> change it's own logon credentials.
>
>
>

Relevant Pages

  • RE: Security Logs
    ... One thing about security auditing is that it does not lie. ... of credentials was used at a specific time, ... Category: Account Logon ... (this is at 5am the user was not here and not logging on) ...
    (microsoft.public.windows.server.active_directory)
  • Re: User bypasses security
    ... We are new to XP - his laptop was "caching" my credentials, ... > Also keep in mind that if you change group membership of a user that you ... > whoami /groups to show the users group membership for the current security ... >> the share if auditing of logon events is enabled. ...
    (microsoft.public.win2000.security)
  • Re: windows 98 lockouts
    ... You might try installing the Directory Services Client on those machines to ... use NTLMv2 which may help depending on Domain Controller Security Policy. ... generate numerous failed logon attempts in the security log. ... > supplying bad credentials. ...
    (microsoft.public.win2000.security)
  • Re: Logon Error - Event ID 533
    ... The suggestion regarding security logs should not apply if the overwrite option has been selected and you have the default maximum of 512 kb. ... How to Set Log Size and Overwrite Options ... The user cannot logon and no Profile folder is made, ... screen whether with a domain account or a local account from the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Help with Security Logs
    ... Security" means that the event was generated by the security ... Primary User is the user context that actually performed the access; ... Client User is the user on behalf of whom the file was accessed. ... The Logon ID fields for Primary User and Client User identify a unique logon ...
    (microsoft.public.security)