Windows Service Privileges

Get help with all aspects of SABnzbd
Forum rules
Help us help you:
  • Are you using the latest stable version of SABnzbd? Downloads page.
  • Tell us what system you run SABnzbd on.
  • Adhere to the forum rules.
  • Do you experience problems during downloading?
    Check your connection in Status and Interface settings window.
    Use Test Server in Config > Servers.
    We will probably ask you to do a test using only basic settings.
  • Do you experience problems during repair or unpacking?
    Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Post Reply
Stumpie
Newbie
Newbie
Posts: 2
Joined: June 29th, 2013, 5:21 am

Windows Service Privileges

Post by Stumpie »

Hi All,

Please accept my apologies in advance if this has been asked before. I've spent some serious time using search, but couldn't find an answer.

I'm running 0.7.13 as a service on Windows 7 Home Premium. It works just fine, but I need it to be able to access network shares. Currently the service runs under the Local System context which denies acces to resources outside the computer. That's fine, because that's what the Local System is for.

I want to create a new service account for the sabnzbd service, and I'd like to do it just right by applying the principle of least privilege. I don't like the idea of having this service running with admin privileges as this would open up my entire network in case of a hole in sabnzbd. The problem is, I'm unable to determine the requirements for sabnzbd as a service. Could anyone give me some info on that?

Thanks in advance,

Stumpie
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: Windows Service Privileges

Post by shypike »

The SABnzbd service can run under any user account, as long as you make sure that it has
the privilege to access the right data folders.
However, the SABHelper function must run under Local System,
otherwise it cannot control the SABnzbd main service.
Stumpie
Newbie
Newbie
Posts: 2
Joined: June 29th, 2013, 5:21 am

Re: Windows Service Privileges

Post by Stumpie »

Ah! Thanks.

Stumpie
Post Reply