Solved

Visual Studio 2008 and 2010 Security Issue

Posted on 2010-08-31
14
452 Views
Last Modified: 2012-05-10
Currently working in an Organization that has removed Adminstrator rights to Visual Studio Developers.  Most of the current OS on the developer machines are XP at this time.

Without going into details I am looking for two answers from this question regardless of best practices.

1)  What is the best practice with justfication for providing a Visual Studio developer the local admin and administrator rights to the local pc.

2)  Is there a workaround that works ensuring security is tight but no functionality to the developer is lost.  If any development functionaility is lost.  What is lost?


Thanks!!!
0
Comment
Question by:Robb Hill
14 Comments
 
LVL 29

Accepted Solution

by:
nffvrxqgrcfqvvc earned 375 total points
ID: 33574184
Besides debugging you don't lose much, the only concern is when you work with Com Classes, when you build the project the .NET IDE won't be able to automatically register the class on the development machine without administrative rights.
0
 
LVL 9

Assisted Solution

by:richard_hughes
richard_hughes earned 125 total points
ID: 33576173
Hello robbhill

If you are going to be attaching a running process (w3wp.exe for instance) you will require admin rights.

Thanks,

Richard Hughes
0
 
LVL 29

Expert Comment

by:Kumaraswamy R
ID: 33576708
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 11

Author Comment

by:Robb Hill
ID: 33582149
rkworlds - I am not sure how your article is relevent to the question?
0
 
LVL 29

Assisted Solution

by:nffvrxqgrcfqvvc
nffvrxqgrcfqvvc earned 375 total points
ID: 33582282
You can code in the IDE without administrative rights. In fact you very rarely need administrative rights. It's going to all depend what your working on. You will run into some issues especially when debugging , installing services, registering components.
IMHO it's an bad idea to disable administrative rights to developers. It's best to code with the least privileges(user mode) but for developers being able to debug and test your code is just as important as writing the code.
The problem I see with this situation is you won't know exactly when you will need administrative rights until it's to late.
 
 
0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33582362
Are there work arounds when in an XP environment with VS 2008 or 2010 to get around registering COM, Attaching Processes, or Debugging.  Debugging being the most important to me.


Can you think of anything else that gets hosed?
0
 
LVL 29

Expert Comment

by:nffvrxqgrcfqvvc
ID: 33582417
I really don't know how you would do this exactly. The only thing I can think of is making one developer you trust have permissions and allowing the code to run under his supervision OR giving him access to a computer that can be used for debugging.
 
0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33582650
I was reading an article and am not sure without testing.
If a web project was created in the www root directory....and that directory had the necessary permissions could debugging mode work?
0
 
LVL 29

Assisted Solution

by:nffvrxqgrcfqvvc
nffvrxqgrcfqvvc earned 375 total points
ID: 33601098
I don't know specifically about the web project :(
Everything you need know is heavily discussed in here. Take the time to read the entire article and discuss these issues with your company.

Developing Software in Visual Studio .NET with Non-Administrative Privileges
http://msdn.microsoft.com/en-us/library/aa289173(VS.71).aspx 
0
 
LVL 44

Expert Comment

by:AndyAinscow
ID: 33609448
This sounds like the developers aren't trusted to be able to use a PC sensibly in your organisation.  Surreal !

0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33619214
lol...its a government thing
0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33619225
I had already found the msn article above...that is specific to 2003 it looks and we are on Xp machines running 2008 and 2010.
0
 
LVL 29

Expert Comment

by:nffvrxqgrcfqvvc
ID: 33619366
The article is still valid even for the recent versions including 2008 or 2010. It's talking about permissions issues and not specific features related to the IDE or framework used.
If you don't have permissions to do something that requires administrative privileges it doesn't really make a difference. :(
 
0
 
LVL 11

Author Closing Comment

by:Robb Hill
ID: 33793019
Thanks this gave me the reasoning to get the developers the admin access they needed rather the workaround hack..thanks to all
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Calculating holidays and working days is a function that is often needed yet it is not one found within the Framework. This article presents one approach to building a working-day calculator for use in .NET.
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question