Skip to main content
Share Your Experience: Take the 2024 Developer Survey
5 votes
Accepted

Recover the password of a Windows service user login account

One method to access LSA secrets is documented here. In a nutshell: Call the Enable-TSDuplicateToken function. Copy the existing registry keys to another, temporary key. User Powershell or another ...
Royce Williams's user avatar
2 votes

UAC and Windows Services

UAC should not affect system services. Definitively aggree with that, thanks a lot to Harry for this clear answer : I was in doubt for a long time until now :-). Tested today in Windows 2012R2 ...
Fabien KOCIK's user avatar
2 votes
Accepted

IIS Application - service account permissions

The only one of those that is even potentially a major risk is starting services, because services run as their own user instead of inheriting the security token of the process that started them. If ...
CBHacking's user avatar
  • 49k
2 votes

What is it called when you only use a user account for a specific task in your OS?

There's no one term for this. The nomenclature changes depending on the system and context. Language that you'd use in normal conversation may have dramatically different connotations in the context ...
Polynomial's user avatar
  • 135k
1 vote
Accepted

Are SSH certificates more secure for service accounts?

Lets break down your problem into three parts: 1) Identity provisioning: Ideally you should strive to provide an identity to each of your servicer at the time of deployment. This is generally done ...
Vinod Gupta's user avatar
1 vote

Amazon S3 policies: CORS or Service Accounts?

This depends on where your API is calling from. AWS (not surprisingly) has many more options if you operate entirely within their platform. If you're operating outside of AWS, I'd recommend option 2. ...
TopherIsSwell's user avatar
1 vote
Accepted

Service Account Best Practices

You would not necessarily be wrong to assign 1-to-1 Service Account to Service, to answer your question. Properly managed accounts in indeed to the key. I took the below Service Account definition ...
Justin's user avatar
  • 712
1 vote

Service Account Best Practices

Am I correct in having the unique service account per integration stance? This is something I always recommend doing because you can set permissions per account. The least privilege principle should ...
Jeroen's user avatar
  • 5,841
1 vote

Does PCI-DSS password guidance apply to service accounts?

Your use of the word 'guidance' is a but off. Under the standard there are 4 parts per requirement: The requirement itself Testing procedures Reporting instructions Guidance These can be found ...
grimthaw's user avatar
1 vote
Accepted

IIS - giving service accounts admin rights?

That sounds super sketchy man. The policy is right... Sounds like an app I'd like to deploy and test my pentesting skills on. :) I'd go with the policy and push on the devs to provide a standard ...
Steve Kline's user avatar
1 vote

UAC and Windows Services

UAC should not affect system services. Apart from this question, I can find no evidence that it ever does, and I have tested on Windows 7, Windows 10v1607 and Windows 10v1803 without being able to ...
Harry Johnston's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible