Re: User account to run WSUS under
- From: "Cris Hanna [SBS - MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 8 Sep 2008 07:24:17 -0500
The role of the volunteer contributers on this newsgroup is primarily to provide quick answers to solutions. If you don't have the time, or won't take the time to look it up, its not our role to "teach" or be your personal consultant.
Sorry you don't like the design of the product.
And slamming any of the regular contributors to this group, is likely to get you a lot less help in the future.
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"SPEnthusiast" <SPEnthusiast@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:AC00817B-78F7-4A17-8499-998D9D5C03D6@xxxxxxxxxxxxxxxx
A local admin on the SBS machine has a lot less privileges that a domain
admin in the SBS domain.
With WSUS 2.0, we couldn't specify the SQL Server instance it could use, and
that's not good design.
Since I have SBS 2003 Premium, I should be able to open port 80. But I
can't, since this is not a very secure product.
There are a lot of "experts" like Russ Grover on these forums, with not a
lot of expertise, but have become complacent for some unknown reasons. I just
wanted to keep them on their toes. I don't have the time to read a lot of
documentation, so these forums are the only place where I can get help. And
there are a lot ot people on these forums that don't have the time for
documentation either.
"Cris Hanna [SBS - MVP]" wrote:
I suppose you could log on as the local admin account, I'm not sure what
that gives you, since the domain admin is also a member of the local admin's
group...still a highly priviledged user account and group membership...
<I guess we should feel privileged at this time that we can at least specify
the SQL Server instance it goes against.>
And comments like these are not likely to win you any brownie points.
Strong passwords, a good firewall, and making sure that only the required
ports (port 80 is not required) are allowed in to your network and this
really shouldn't be an issue.
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"SPEnthusiast" <SPEnthusiast@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8E1678EF-8305-409F-A351-06F8874CC57C@xxxxxxxxxxxxxxxx
>I logged onto my SBS machine as a domain admin and installed WSUS 3.0.
> Everything works, but there's just this one problem - WSUS services, > and
> the
> way it accesses my SQL Server instance are done using my domain admin
> credentials. I would like to restrict WSUS so that it uses less > privileged
> credentials.
>
> Can I install WSUS 3.0 by logging onto my SBS machine as a local admin?
>
> And why couldn't Microsoft let us specify a less privileged domain user
> account while installing WSUS 3.0? I guess we should feel privileged at
> this
> time that we can at least specify the SQL Server instance it goes > against.
>
> Thanks.
>
.
- Follow-Ups:
- Re: User account to run WSUS under
- From: SPEnthusiast
- Re: User account to run WSUS under
- References:
- User account to run WSUS under
- From: SPEnthusiast
- Re: User account to run WSUS under
- From: Cris Hanna [SBS - MVP]
- Re: User account to run WSUS under
- From: SPEnthusiast
- User account to run WSUS under
- Prev by Date: Re: Virtual site
- Next by Date: Re: Virtual site
- Previous by thread: Re: User account to run WSUS under
- Next by thread: Re: User account to run WSUS under
- Index(es):
Relevant Pages
|
Loading
