creating local users, how??

  • Thread starter Thread starter Jeff
  • Start date Start date
J

Jeff

Guest
hey

I've installed Apache HTTP Server on a Windows Server 2003 machine. I would
like to create an local user on this machine which will be the deticated
user account in which the Apache process will run inside.

This win2k3 machine has been promoted to domain controller so I don't have
the local users option within compmgmt.msc

So how can a local user be created on a machine promoted as domain
controller ?

Best Regards

Jeff
 
Re: creating local users, how??

Hello Jeff,

Like you say, on DC's no local users. So create a so called service account,
a domain user which will only be used for running apache. So never login
with it, give it a strong long password, which should never expire. Write
down the password and store it on a safe place. Give the account only the
rights apache needed, so make him NOT an administrator.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> hey
>
> I've installed Apache HTTP Server on a Windows Server 2003 machine. I
> would like to create an local user on this machine which will be the
> deticated user account in which the Apache process will run inside.
>
> This win2k3 machine has been promoted to domain controller so I don't
> have the local users option within compmgmt.msc
>
> So how can a local user be created on a machine promoted as domain
> controller ?
>
> Best Regards
>
> Jeff
>
 
Re: creating local users, how??

thanks, just one more question:

I've created an domain user, but it's a member of Domain Users... I tryed to
remove that group from the user, but I'm not allowed to do that. "Domain
Users" is the primary group on this machine. I know I could create another
group and set that as primary group. But I don't think that would make it
more secure because all the other accounts need to be a member of that
group... or so I think... what is your views on this?
 
Re: creating local users, how??

Hello Jeff,

Just leave that account as a domain user. It's not more or less secure than
a self created group.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> thanks, just one more question:
>
> I've created an domain user, but it's a member of Domain Users... I
> tryed to remove that group from the user, but I'm not allowed to do
> that. "Domain Users" is the primary group on this machine. I know I
> could create another group and set that as primary group. But I don't
> think that would make it more secure because all the other accounts
> need to be a member of that group... or so I think... what is your
> views on this?
>
 
Re: creating local users, how??

Jeff <it_consultant1@hotmail.com.NOSPAM> wrote:
> hey
>
> I've installed Apache HTTP Server on a Windows Server 2003 machine. I
> would like to create an local user on this machine which will be the
> deticated user account in which the Apache process will run inside.
>
> This win2k3 machine has been promoted to domain controller so I don't
> have the local users option within compmgmt.msc
>
> So how can a local user be created on a machine promoted as domain
> controller ?
>
> Best Regards
>
> Jeff

Perhaps OT, but a webserver should not be a DC, *especially* if you're going
to use it for any sort of public websites (in which case, it ought to be a
standalone server in an isolated network segment with no connectivity to the
LAN/AD at all).
 
Re: creating local users, how??

OT what is that acronym for ?

Thanks for advice about having this server on an standalone server.

Jeff
 
Re: creating local users, how??

Jeff <it_consultant1@hotmail.com.NOSPAM> wrote:
> OT what is that acronym for ?
>
> Thanks for advice about having this server on an standalone server.
>
> Jeff

No prob.

OT = "off topic"

....but it's an abbreviation, not an acronym. ;)
 
Back
Top