Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 468
  • Last Modified:

Visual Studio 2008 and 2010 Security Issue

Currently working in an Organization that has removed Adminstrator rights to Visual Studio Developers.  Most of the current OS on the developer machines are XP at this time.

Without going into details I am looking for two answers from this question regardless of best practices.

1)  What is the best practice with justfication for providing a Visual Studio developer the local admin and administrator rights to the local pc.

2)  Is there a workaround that works ensuring security is tight but no functionality to the developer is lost.  If any development functionaility is lost.  What is lost?


Thanks!!!
0
Robb Hill
Asked:
Robb Hill
4 Solutions
 
nffvrxqgrcfqvvcCommented:
Besides debugging you don't lose much, the only concern is when you work with Com Classes, when you build the project the .NET IDE won't be able to automatically register the class on the development machine without administrative rights.
0
 
richard_hughesCommented:
Hello robbhill

If you are going to be attaching a running process (w3wp.exe for instance) you will require admin rights.

Thanks,

Richard Hughes
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
Robb HillSenior .Net DeveloperAuthor Commented:
rkworlds - I am not sure how your article is relevent to the question?
0
 
nffvrxqgrcfqvvcCommented:
You can code in the IDE without administrative rights. In fact you very rarely need administrative rights. It's going to all depend what your working on. You will run into some issues especially when debugging , installing services, registering components.
IMHO it's an bad idea to disable administrative rights to developers. It's best to code with the least privileges(user mode) but for developers being able to debug and test your code is just as important as writing the code.
The problem I see with this situation is you won't know exactly when you will need administrative rights until it's to late.
 
 
0
 
Robb HillSenior .Net DeveloperAuthor Commented:
Are there work arounds when in an XP environment with VS 2008 or 2010 to get around registering COM, Attaching Processes, or Debugging.  Debugging being the most important to me.


Can you think of anything else that gets hosed?
0
 
nffvrxqgrcfqvvcCommented:
I really don't know how you would do this exactly. The only thing I can think of is making one developer you trust have permissions and allowing the code to run under his supervision OR giving him access to a computer that can be used for debugging.
 
0
 
Robb HillSenior .Net DeveloperAuthor Commented:
I was reading an article and am not sure without testing.
If a web project was created in the www root directory....and that directory had the necessary permissions could debugging mode work?
0
 
nffvrxqgrcfqvvcCommented:
I don't know specifically about the web project :(
Everything you need know is heavily discussed in here. Take the time to read the entire article and discuss these issues with your company.

Developing Software in Visual Studio .NET with Non-Administrative Privileges
http://msdn.microsoft.com/en-us/library/aa289173(VS.71).aspx 
0
 
AndyAinscowCommented:
This sounds like the developers aren't trusted to be able to use a PC sensibly in your organisation.  Surreal !

0
 
Robb HillSenior .Net DeveloperAuthor Commented:
lol...its a government thing
0
 
Robb HillSenior .Net DeveloperAuthor Commented:
I had already found the msn article above...that is specific to 2003 it looks and we are on Xp machines running 2008 and 2010.
0
 
nffvrxqgrcfqvvcCommented:
The article is still valid even for the recent versions including 2008 or 2010. It's talking about permissions issues and not specific features related to the IDE or framework used.
If you don't have permissions to do something that requires administrative privileges it doesn't really make a difference. :(
 
0
 
Robb HillSenior .Net DeveloperAuthor Commented:
Thanks this gave me the reasoning to get the developers the admin access they needed rather the workaround hack..thanks to all
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now