Print Portal user IIS_WEBPRINT

Harald Rauch

• 2024年06月03日 13:38

When installing the Print Portal, user IIS_WEBPRINT is created and assigned to local Administrator group.
Our IT Security team is concerned about this and would like to change this.
What are the implications, if we move user IIS_WEBPRINT to Power User group, or even make it a normal user? What are the permissions it needs to function correctly?

0

• 

  Shawn Steward

  ★ BarTender Hero ★

  • 2025年04月29日 14:40

  It's been awhile since you posted this, however you can always establish a compensating control like denying IIS_WEBPRINT the ability to log into the computer directly or remotely, which will usually make a Security team happy.

  0
• 

  Harald Rauch

  ★ BarTender Hero ★

  • 2025年05月05日 09:07

  Thank you, Shawn Steward , for your recommendation.

  Our security team has set up a functional account for services, which is tightly controlled by group policies and after installing Print Portal I switch IIS_WEBPRINT for that functional account. 

  0

サインインしてコメントを残してください。