I have a Windows service that accesses a database connection. Since users rarely use Windows authentication, I encrypt the connection string. For development I have the password hard-coded, but I know this is a very bad idea. What is the proper way to store a non-user entered password?
As a side note, I tried storing the password in the Credentials Manager, but this required the service to be run under either the local system account or an administrator account, which some clients do not want to allow.
The main question here is this: What is the best way for a Windows service to store sensitive information?