Security Configuration
Chris,
I think it depends on more about what you are referring to by 'locking
down' the applicaiton. as neil mentioned, with the older versions of SNA
Server the only concerns really involved the COMCFG share, and the fact
that it was required that the SNA Services run under a Domain Admin Account.
The Article that Neil was referring to is below. Feel free to take a look
at it, and repost if you have any questions regarding the information.
Securing SNA Server to Not Require Everyone: Read Access (NOTE: This only
applies to 2.x versions, but it explains the how.why of the share a bit
more. Later versions do not leave this completely with full access to
Everyone)
http://support.microsoft.com/?id=140556
ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸ ¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸
Jeremy "Rem" Remlinger, MSCE
SNA/HIS Engineer
Microsoft
This posting is provided 'AS IS' with no warranties, and confers no rights.
© 2004 Microsoft Corporation. All rights reserved.
ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸ ¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸
--------------------
Thread-Topic: Security Configuration
thread-index: AcRk4JYZKqnLteBNQcW9qCSH/tgxSg==
X-WBNR-Posting-Host: 195.212.29.83
From: "=?Utf-8?B?Q2hyaXM=?=" <Chris@discussions.microsoft.com>
References: <51A37990-129C-4B29-A807-045233D4DCE8@microsoft.com>
<VA.00006215.00636859@compuserve.com>
Subject: Re: Security Configuration
Date: Thu, 8 Jul 2004 04:42:02 -0700
Lines: 18
Message-ID: <9422F59B-88D0-4F7C-915F-9F2448A4F44F@microsoft.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.hiserver.general
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 127.0.0.1
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFT NGXA03.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.hiserver.general:3765
X-Tomcat-NG: microsoft.public.hiserver.general
Thanks for that. Can you point me at the kbs as I seem to have drawn a
blank in looking. Not sure if I am missing something, or the product does
not need much to do to lock it down.
|