From: Dominick Baier (dbdie-lounge.com)
Date: Wed Jun 30 2004 - 11:43:35 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

you definitely don't need admin rights for your day to day work in VS.NET.

in a default setup you can't debug any programs that don't run under your
account, e.g. asp.net

with iis 6 this is easy to solve - create a app pool that runs under the
account of the user - so your web apps/services get started with the same
account as the programmer and voila - you can debug them

prior to ii6 this is a little bit harder - you have to change the process
account of asp.net in machine.config - I wouldn't recommend that.

as someone else said - you could give the developer the SeDebugPrivilege -
but this is nearly as powerful as running as admin....

some other stuff that won't run under a user account are tools like

caspol
gacutil
regsvc

and the like...

check this excellent article from keith brown
http://www.pluralsight.com/keith/book/html/howto_runasnonadmin.html

Dominick Baier
ERNW / DevelopMentor

www.leastprivilege.com

-----Original Message-----
From: Austin Ehlers [mailto:aehlerscomcast.net]
Sent: Mittwoch, 30. Juni 2004 00:36
Cc: focus-mssecurityfocus.com
Subject: RE: Non Admin Rights + Visual Studio

You only need admin rights if you debug ASP.NET programs (at least, I
haven't found a way to do it without them)

Austin Ehlers

-----Original Message-----
From: Mike Lucas [mailto:mlucasrice.edu]
Sent: Tuesday, June 29, 2004 01:42 PM
To: Gooch, Linnie
Cc: focus-mssecurityfocus.com
Subject: Re: Non Admin Rights + Visual Studio

My users are running VS and VS.net as normal users with no trouble. I
did not have to do anything special to make this work. I did however
have to add the users to the VS developers group and the debugger users
group that VS creates when you install it. I am running this on win2k
these systems if that makes any difference.

Do you have more info as to why your users need admin rights to use VS?

Mike Lucas
Sr. PC Systems Admin
Rice University

Gooch, Linnie wrote:
> I would like to know if anyone knows how to make Visual Studio run on a
> machine that does not have admin rights. We have a few programmers that
> are abusing their privileges, and I need to enable them to do their
> work, but lock them down. Please advise with any suggestions.
>
>
> Linnie Gooch, MCSE MCSA
> Manager of Systems and Technology
> Wescom Credit Union
> (626) 535 1000 x 8801
>
>
>
>
> **********************************************************************
> This email and any files transmitted with it are confidential
> and intended solely for the use of the individual or entity to
> whom they are addressed. If you have received this email
> in error, please delete it immediately and advise the sender.
> WESCOM CREDIT UNION (626) 535-1000
> **********************************************************************
>
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
-
>

---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]