topic Re: Managing Windows Services in General Topics

Managing Windows Services

Retired Member — Mon, 09 Nov 2020 20:01:22 GMT

Ok, so this may be a stupid question, but I have a server that has a web service running under a domain\webservice account. I want to define a security policy for the service, but the firewall does not consistently get the correct user. After a reboot the user is right, but if I sign on to the box the user becomes me instead. I have tried the tsagent to see if it will assign it a port range, but it does not.

I just cant seem to provide a consistent way to track the server user to write a policy around it. Any thoughts?

Re: Managing Windows Services

BPry — Tue, 10 Nov 2020 02:26:38 GMT

@Retired Member,

That's kind of working as designed. The ip-user-mapping can only have a single user assigned to an IP address at any one time, so as soon as you login to the server it will show as you instead of the service account. You would need to create a feature request if you want to have the ability to assign multiple users to the same IP address, but just as an FYI that would be a pretty major overhaul of how user-id is tracked on the system since the current system couldn't actually support that.

Re: Managing Windows Services

Retired Member — Tue, 10 Nov 2020 03:40:11 GMT

@BPry thanks. I kind of thought that would be the case. It seems to me that is a bit short sighted. Who never logs into a box to support it...