Re: User account to run WSUS under

Considering the blatant truth that you guys are not very security-aware, I
wouldn't want help from any of you.


"Cris Hanna [SBS - MVP]" wrote:

no it was not us guys...but you've whined about Microsoft "And why couldn't
Microsoft let us specify a less privileged domain user account while
installing WSUS 3.0? I guess we should feel privileged at this time that we
can at least specify the SQL Server instance it goes against."

Sooo hopefully you've had your fun...

As I indicated before...should you post again don't be surprised if you
don't get a lot of responses.
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"SPEnthusiast" <SPEnthusiast@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:ED29C187-3D6C-47A0-8C7D-23E76B1A9C45@xxxxxxxxxxxxxxxx
I didn't know that it was you guys that designed the product. Now
everything
makes sense.

"Cris Hanna [SBS - MVP]" wrote:

The role of the volunteer contributers on this newsgroup is primarily to
provide quick answers to solutions. If you don't have the time, or
won't
take the time to look it up, its not our role to "teach" or be your
personal
consultant.

Sorry you don't like the design of the product.

And slamming any of the regular contributors to this group, is likely to
get
you a lot less help in the future.

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"SPEnthusiast" <SPEnthusiast@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AC00817B-78F7-4A17-8499-998D9D5C03D6@xxxxxxxxxxxxxxxx
A local admin on the SBS machine has a lot less privileges that a domain
admin in the SBS domain.

With WSUS 2.0, we couldn't specify the SQL Server instance it could
use,
and
that's not good design.

Since I have SBS 2003 Premium, I should be able to open port 80. But I
can't, since this is not a very secure product.

There are a lot of "experts" like Russ Grover on these forums, with not
a
lot of expertise, but have become complacent for some unknown reasons.
I
just
wanted to keep them on their toes. I don't have the time to read a lot
of
documentation, so these forums are the only place where I can get help.
And
there are a lot ot people on these forums that don't have the time for
documentation either.



"Cris Hanna [SBS - MVP]" wrote:

I suppose you could log on as the local admin account, I'm not sure
what
that gives you, since the domain admin is also a member of the local
admin's
group...still a highly priviledged user account and group
membership...

<I guess we should feel privileged at this time that we can at least
specify
the SQL Server instance it goes against.>
And comments like these are not likely to win you any brownie points.

Strong passwords, a good firewall, and making sure that only the
required
ports (port 80 is not required) are allowed in to your network and
this
really shouldn't be an issue.
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"SPEnthusiast" <SPEnthusiast@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:8E1678EF-8305-409F-A351-06F8874CC57C@xxxxxxxxxxxxxxxx
I logged onto my SBS machine as a domain admin and installed WSUS
3.0.
Everything works, but there's just this one problem - WSUS services,
and
the
way it accesses my SQL Server instance are done using my domain
admin
credentials. I would like to restrict WSUS so that it uses less
privileged
credentials.

Can I install WSUS 3.0 by logging onto my SBS machine as a local
admin?

And why couldn't Microsoft let us specify a less privileged domain
user
account while installing WSUS 3.0? I guess we should feel privileged
at
this
time that we can at least specify the SQL Server instance it goes
against.

Thanks.







.

Relevant Pages

  • Re: User account to run WSUS under
    ... I get SCE and MOSS with Microsoft Action Pack, ... Why is running Exchange on SBS OK, ... we couldn't specify the SQL Server instance it ...
    (microsoft.public.windows.server.sbs)
  • Re: How to restrict any select to a subset?
    ... One approach would be to add a column to the target tables that would specify the User/Company that has access to the row. ... Microsoft MVP ... Microsoft data and only Oracle can see the Oracle data. ... invoice record may have a FK of the company, but an invoice item record only ...
    (microsoft.public.dotnet.framework.adonet)
  • RE: BCP server not found failure
    ... You have to specify the -S flag to connect to a named instace. ... option would be to have your application create the bcp command correctly. ... Program and to order your FREE Security Tool Kit, ... Microsoft highly recommends that users with Internet access update their ...
    (microsoft.public.sqlserver.connect)
  • RE: Dynamic URL Behavior & Configuration
    ... \par Microsoft Online Support ... \par references a class library which in turn has a web reference. ... \par executable's .exe.config file to specify the URL, ... \par location of the URL for that deployment. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Setting up ASP.NET Configuration in Visual Studio 2005
    ... ASP.NET Configuration Wizard know which host and sql server instance name to ... you must specify the defaultProvider attribute. ...
    (microsoft.public.dotnet.framework.aspnet.security)