Print Portal user IIS_WEBPRINT
When installing the Print Portal, user IIS_WEBPRINT is created and assigned to local Administrator group.
Our IT Security team is concerned about this and would like to change this.
What are the implications, if we move user IIS_WEBPRINT to Power User group, or even make it a normal user? What are the permissions it needs to function correctly?
-
It's been awhile since you posted this, however you can always establish a compensating control like denying IIS_WEBPRINT the ability to log into the computer directly or remotely, which will usually make a Security team happy.
0 -
Thank you, Shawn Steward , for your recommendation.
Our security team has set up a functional account for services, which is tightly controlled by group policies and after installing Print Portal I switch IIS_WEBPRINT for that functional account.
0
Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.
Kommentare
2 Kommentare