From: Randhir Vayalambrone (vayalambronesyahoo.com)
Date: Tue Jun 29 2004 - 23:18:34 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I've been programming on Windows for close to 7 years
now, I've never logged into windows as admin to do any
development work using VS. Most of the time the only
additional privilege a developer would need outside of
a normal user would be debugging privileges ( you
might frequently have to kill processes if you are
writing bad code for a bad design though ...)

Writing Secure code is a book you might want to refer
to.

If developers are using domain or local admin rights
for development, you will not get to know certain
problems till a very late time (maybe testing if that
happens).

Now I get an idea why there are so many applications
for windows that goes wild whenever I try to run them
as a non-admin user (instead of checking privileges
and permissions and reporting a simple access denied
message, I've seen applications do everything from
standup comedy to end user torture when the assumed
privileges/permissions are missing on the end users
system.

And finally, if the developers do not understand
corporate policies regarding use and misuse of
privileges and policies, they should either be trained
or shown the way out.

R.V

--- "Alan Melia (Melmac)" <alanmemelmac.co.uk> wrote:
> Here is a good place to start...
>
>
http://www.dotnetdevs.com/articles/RunningAsNonAdmin.aspx
>
> Mainly "How To: Secure Your Developer Workstation"
>
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/ht
> ml/HTWorkStat.asp
>
> Hope it helps.
>
> Alan Melia
>
> Melmac Solutions Ltd.
>
> http://www.melmac.co.uk
>
>
>
> -----Original Message-----
> From: Gooch, Linnie [mailto:Linniewescom.org]
> Sent: 29 June 2004 18:32
> To: focus-mssecurityfocus.com
> Subject: Non Admin Rights + Visual Studio
>
> I would like to know if anyone knows how to make
> Visual Studio run on a
> machine that does not have admin rights. We have a
> few programmers that are
> abusing their privileges, and I need to enable them
> to do their work, but
> lock them down. Please advise with any suggestions.
>
>
> Linnie Gooch, MCSE MCSA
> Manager of Systems and Technology
> Wescom Credit Union
> (626) 535 1000 x 8801
>
>
>
>
>
**********************************************************************
> This email and any files transmitted with it are
> confidential and intended
> solely for the use of the individual or entity to
> whom they are addressed.
> If you have received this email in error, please
> delete it immediately and
> advise the sender.
> WESCOM CREDIT UNION (626) 535-1000
>
**********************************************************************
>
>
>
---------------------------------------------------------------------------
>
---------------------------------------------------------------------------
>
>
>
---------------------------------------------------------------------------
>
---------------------------------------------------------------------------
>
>

=====
"If you can imagine it, you can achieve it; if you can dream it, you can become it."
(William Arthur Ward)

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]