Page 1 of 1

Windows Service Privileges

Posted: June 29th, 2013, 5:29 am
by Stumpie
Hi All,

Please accept my apologies in advance if this has been asked before. I've spent some serious time using search, but couldn't find an answer.

I'm running 0.7.13 as a service on Windows 7 Home Premium. It works just fine, but I need it to be able to access network shares. Currently the service runs under the Local System context which denies acces to resources outside the computer. That's fine, because that's what the Local System is for.

I want to create a new service account for the sabnzbd service, and I'd like to do it just right by applying the principle of least privilege. I don't like the idea of having this service running with admin privileges as this would open up my entire network in case of a hole in sabnzbd. The problem is, I'm unable to determine the requirements for sabnzbd as a service. Could anyone give me some info on that?

Thanks in advance,

Stumpie

Re: Windows Service Privileges

Posted: June 30th, 2013, 12:49 pm
by shypike
The SABnzbd service can run under any user account, as long as you make sure that it has
the privilege to access the right data folders.
However, the SABHelper function must run under Local System,
otherwise it cannot control the SABnzbd main service.

Re: Windows Service Privileges

Posted: July 3rd, 2013, 8:47 am
by Stumpie
Ah! Thanks.

Stumpie