Guest Jeff Posted September 2, 2007 Posted September 2, 2007 hey I've installed Apache HTTP Server on a Windows Server 2003 machine. I would like to create an local user on this machine which will be the deticated user account in which the Apache process will run inside. This win2k3 machine has been promoted to domain controller so I don't have the local users option within compmgmt.msc So how can a local user be created on a machine promoted as domain controller ? Best Regards Jeff
Guest Meinolf Weber Posted September 2, 2007 Posted September 2, 2007 Re: creating local users, how?? Hello Jeff, Like you say, on DC's no local users. So create a so called service account, a domain user which will only be used for running apache. So never login with it, give it a strong long password, which should never expire. Write down the password and store it on a safe place. Give the account only the rights apache needed, so make him NOT an administrator. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > hey > > I've installed Apache HTTP Server on a Windows Server 2003 machine. I > would like to create an local user on this machine which will be the > deticated user account in which the Apache process will run inside. > > This win2k3 machine has been promoted to domain controller so I don't > have the local users option within compmgmt.msc > > So how can a local user be created on a machine promoted as domain > controller ? > > Best Regards > > Jeff >
Guest Jeff Posted September 2, 2007 Posted September 2, 2007 Re: creating local users, how?? thanks, just one more question: I've created an domain user, but it's a member of Domain Users... I tryed to remove that group from the user, but I'm not allowed to do that. "Domain Users" is the primary group on this machine. I know I could create another group and set that as primary group. But I don't think that would make it more secure because all the other accounts need to be a member of that group... or so I think... what is your views on this?
Guest Meinolf Weber Posted September 2, 2007 Posted September 2, 2007 Re: creating local users, how?? Hello Jeff, Just leave that account as a domain user. It's not more or less secure than a self created group. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > thanks, just one more question: > > I've created an domain user, but it's a member of Domain Users... I > tryed to remove that group from the user, but I'm not allowed to do > that. "Domain Users" is the primary group on this machine. I know I > could create another group and set that as primary group. But I don't > think that would make it more secure because all the other accounts > need to be a member of that group... or so I think... what is your > views on this? >
Guest Lanwench [MVP - Exchange] Posted September 3, 2007 Posted September 3, 2007 Re: creating local users, how?? Jeff <it_consultant1@hotmail.com.NOSPAM> wrote: > hey > > I've installed Apache HTTP Server on a Windows Server 2003 machine. I > would like to create an local user on this machine which will be the > deticated user account in which the Apache process will run inside. > > This win2k3 machine has been promoted to domain controller so I don't > have the local users option within compmgmt.msc > > So how can a local user be created on a machine promoted as domain > controller ? > > Best Regards > > Jeff Perhaps OT, but a webserver should not be a DC, *especially* if you're going to use it for any sort of public websites (in which case, it ought to be a standalone server in an isolated network segment with no connectivity to the LAN/AD at all).
Guest Jeff Posted September 4, 2007 Posted September 4, 2007 Re: creating local users, how?? OT what is that acronym for ? Thanks for advice about having this server on an standalone server. Jeff
Guest Lanwench [MVP - Exchange] Posted September 5, 2007 Posted September 5, 2007 Re: creating local users, how?? Jeff <it_consultant1@hotmail.com.NOSPAM> wrote: > OT what is that acronym for ? > > Thanks for advice about having this server on an standalone server. > > Jeff No prob. OT = "off topic" ....but it's an abbreviation, not an acronym. ;)
Recommended Posts