WCF Windows service permissions issue
I created a WCF service and hosted it using Windows Services host. To install the project, I created a setup project (as described here ). The tutorial says that the serviceProcessInstaller1
Account property for the Network Service is defined in ProjectInstaller.cs . Using this parameter did not start the service on the server. When I tried to start the process manually, it immediately returned to a stopped state.
After I changed my account to LocalSystem, the service works correctly. My questions:
- Any ideas why it won't work with the Network Service account?
- What are the security implications of using the server with the LocalSystem account? This server is used locally on the intranet as a reporting server for other servers.
+2
a source to share
1 answer
- The web service does not have the proper privileges to start a WCF host using named pipes (see http://weblogs.thinktecture.com/cweyer/2007/12/dealing-with-os-privilege-issues-in-wcf-named-pipes -scenarios.html ).
- See http://www.windowsitpro.com/article/services/understanding-the-local-service-and-network-service-accounts.aspx for a description of the differences between these accounts. LocalSystem is a local administrator account that can cause many problems if used by an attacker. The Network Service account has much less access and is better to use because of this.
0
a source to share