[users@httpd] Apache security (win)

[Ryan Johnson <rj...@espgroup.net>]

Hey everyone,

Have a question about the "User rights assignment" in windows. In the apache docs they recommend (when running apache as a service) to create a new user account for the apache service and to grant this new user  "Log on as a service and Act as part of the operating system" priviledges. Our apache test server seems to run fine without "Act as part of the operating system". Why is this right needed? It seems to be more than necessary. Maybe we have the module that needs this right disabled. Can anyone see any reason to enable this right?

Here is the apache doc that talks about this
http://httpd.apache.org/docs-2.0/platform/windows.html#winsvc

Here is the Microsoft description of Act as part of the operating system
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/proddocs/525.asp

Thanks,
Ryan

Ryan Johnson
Security Architect
ESP Group


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org