creating local users, how??

[Guest Jeff]

hey

 

I've installed Apache HTTP Server on a Windows Server 2003 machine. I would

like to create an local user on this machine which will be the deticated

user account in which the Apache process will run inside.

 

This win2k3 machine has been promoted to domain controller so I don't have

the local users option within compmgmt.msc

 

So how can a local user be created on a machine promoted as domain

controller ?

 

Best Regards

 

Jeff

[Guest Meinolf Weber]

Re: creating local users, how??

 

Hello Jeff,

 

Like you say, on DC's no local users. So create a so called service account,

a domain user which will only be used for running apache. So never login

with it, give it a strong long password, which should never expire. Write

down the password and store it on a safe place. Give the account only the

rights apache needed, so make him NOT an administrator.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

> hey

>

> I've installed Apache HTTP Server on a Windows Server 2003 machine. I

> would like to create an local user on this machine which will be the

> deticated user account in which the Apache process will run inside.

>

> This win2k3 machine has been promoted to domain controller so I don't

> have the local users option within compmgmt.msc

>

> So how can a local user be created on a machine promoted as domain

> controller ?

>

> Best Regards

>

> Jeff

>

[Guest Jeff]

Re: creating local users, how??

 

thanks, just one more question:

 

I've created an domain user, but it's a member of Domain Users... I tryed to

remove that group from the user, but I'm not allowed to do that. "Domain

Users" is the primary group on this machine. I know I could create another

group and set that as primary group. But I don't think that would make it

more secure because all the other accounts need to be a member of that

group... or so I think... what is your views on this?

[Guest Meinolf Weber]

Re: creating local users, how??

 

Hello Jeff,

 

Just leave that account as a domain user. It's not more or less secure than

a self created group.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

> thanks, just one more question:

>

> I've created an domain user, but it's a member of Domain Users... I

> tryed to remove that group from the user, but I'm not allowed to do

> that. "Domain Users" is the primary group on this machine. I know I

> could create another group and set that as primary group. But I don't

> think that would make it more secure because all the other accounts

> need to be a member of that group... or so I think... what is your

> views on this?

>

[Guest Lanwench [MVP - Exchange]]

Re: creating local users, how??

 

Jeff <it_consultant1@hotmail.com.NOSPAM> wrote:

> hey

>

> I've installed Apache HTTP Server on a Windows Server 2003 machine. I

> would like to create an local user on this machine which will be the

> deticated user account in which the Apache process will run inside.

>

> This win2k3 machine has been promoted to domain controller so I don't

> have the local users option within compmgmt.msc

>

> So how can a local user be created on a machine promoted as domain

> controller ?

>

> Best Regards

>

> Jeff

 

Perhaps OT, but a webserver should not be a DC, *especially* if you're going

to use it for any sort of public websites (in which case, it ought to be a

standalone server in an isolated network segment with no connectivity to the

LAN/AD at all).

[Guest Jeff]

Re: creating local users, how??

 

OT what is that acronym for ?

 

Thanks for advice about having this server on an standalone server.

 

Jeff

[Guest Lanwench [MVP - Exchange]]

Re: creating local users, how??

 

Jeff <it_consultant1@hotmail.com.NOSPAM> wrote:

> OT what is that acronym for ?

>

> Thanks for advice about having this server on an standalone server.

>

> Jeff

 

No prob.

 

OT = "off topic"

 

....but it's an abbreviation, not an acronym. ;)