Re: Windows Service Security

2012-10-31 Thread Cédric Couralet
> Maybe as a suggestion for the people who make the installers for > Tomcat/Windows ? > > I'm not sure I understand (you'll have to excuse my poor understanding of english nuance :) ) My reply was not a suggestion, but it would be great if the installer could provide the option. I never looked how

Re: Windows Service Security

2012-10-31 Thread André Warnier
Cédric Couralet wrote: Bill, - create a local user, e.g. "tomcat" - stop Tomcat - use whatever path the Microsoft geniuses have invented this week to reach the Services applet - search for the "Apache Tomcat" Service - right click on it and select Settings or Properties (ditto) - in the tab "Log

Re: Windows Service Security

2012-10-31 Thread Cédric Couralet
> Bill, > > - create a local user, e.g. "tomcat" > - stop Tomcat > - use whatever path the Microsoft geniuses have invented this week to > reach the Services applet > - search for the "Apache Tomcat" Service > - right click on it and select Settings or Properties (ditto) > - in the tab "Login as" (

Re: Windows Service Security

2012-10-31 Thread André Warnier
Martin Gainty wrote: Good Afternoon Bill did you have a chance to take a look at the how to for configuring Windows domain controller (to enable Tomcat to support Windows authentication) http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Built-in_Tomcat_support Does this help?

RE: Windows Service Security

2012-10-31 Thread Martin Gainty
__ Please do not alter or otherwise disrupt this communication..Thank You > From: william.b...@willis.com > To: users@tomcat.apache.org > Subject: Windows Service Security > Date: Wed, 31 Oct 2012 16:01:08 + > > We are running Tomcat 7.0.29

RE: Windows Service Security

2012-10-31 Thread Leo Donahue - RDSA IT
>>-Original Message- >>From: Burn William [mailto:william.b...@willis.com] >>Sent: Wednesday, October 31, 2012 9:01 AM >>To: users@tomcat.apache.org >>Subject: Windows Service Security >>Can the Tomcat service run as a standard user, Yes >>d

Windows Service Security

2012-10-31 Thread Burn William
We are running Tomcat 7.0.29 on Windows 2008 R2 Service Pack 1. My question is this, the documentation specifically states, "For optimal security, the service should be run as a separate user, with reduced permissions (see the Windows Services administration tool and its documentation)." I am