Solved

Visual Studio 2008 and 2010 Security Issue

Posted on 2010-08-31
14
451 Views
Last Modified: 2012-05-10
Currently working in an Organization that has removed Adminstrator rights to Visual Studio Developers.  Most of the current OS on the developer machines are XP at this time.

Without going into details I am looking for two answers from this question regardless of best practices.

1)  What is the best practice with justfication for providing a Visual Studio developer the local admin and administrator rights to the local pc.

2)  Is there a workaround that works ensuring security is tight but no functionality to the developer is lost.  If any development functionaility is lost.  What is lost?


Thanks!!!
0
Comment
Question by:Robb Hill
14 Comments
 
LVL 29

Accepted Solution

by:
nffvrxqgrcfqvvc earned 375 total points
ID: 33574184
Besides debugging you don't lose much, the only concern is when you work with Com Classes, when you build the project the .NET IDE won't be able to automatically register the class on the development machine without administrative rights.
0
 
LVL 9

Assisted Solution

by:richard_hughes
richard_hughes earned 125 total points
ID: 33576173
Hello robbhill

If you are going to be attaching a running process (w3wp.exe for instance) you will require admin rights.

Thanks,

Richard Hughes
0
 
LVL 29

Expert Comment

by:Kumaraswamy R
ID: 33576708
0
Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

 
LVL 11

Author Comment

by:Robb Hill
ID: 33582149
rkworlds - I am not sure how your article is relevent to the question?
0
 
LVL 29

Assisted Solution

by:nffvrxqgrcfqvvc
nffvrxqgrcfqvvc earned 375 total points
ID: 33582282
You can code in the IDE without administrative rights. In fact you very rarely need administrative rights. It's going to all depend what your working on. You will run into some issues especially when debugging , installing services, registering components.
IMHO it's an bad idea to disable administrative rights to developers. It's best to code with the least privileges(user mode) but for developers being able to debug and test your code is just as important as writing the code.
The problem I see with this situation is you won't know exactly when you will need administrative rights until it's to late.
 
 
0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33582362
Are there work arounds when in an XP environment with VS 2008 or 2010 to get around registering COM, Attaching Processes, or Debugging.  Debugging being the most important to me.


Can you think of anything else that gets hosed?
0
 
LVL 29

Expert Comment

by:nffvrxqgrcfqvvc
ID: 33582417
I really don't know how you would do this exactly. The only thing I can think of is making one developer you trust have permissions and allowing the code to run under his supervision OR giving him access to a computer that can be used for debugging.
 
0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33582650
I was reading an article and am not sure without testing.
If a web project was created in the www root directory....and that directory had the necessary permissions could debugging mode work?
0
 
LVL 29

Assisted Solution

by:nffvrxqgrcfqvvc
nffvrxqgrcfqvvc earned 375 total points
ID: 33601098
I don't know specifically about the web project :(
Everything you need know is heavily discussed in here. Take the time to read the entire article and discuss these issues with your company.

Developing Software in Visual Studio .NET with Non-Administrative Privileges
http://msdn.microsoft.com/en-us/library/aa289173(VS.71).aspx 
0
 
LVL 44

Expert Comment

by:AndyAinscow
ID: 33609448
This sounds like the developers aren't trusted to be able to use a PC sensibly in your organisation.  Surreal !

0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33619214
lol...its a government thing
0
 
LVL 11

Author Comment

by:Robb Hill
ID: 33619225
I had already found the msn article above...that is specific to 2003 it looks and we are on Xp machines running 2008 and 2010.
0
 
LVL 29

Expert Comment

by:nffvrxqgrcfqvvc
ID: 33619366
The article is still valid even for the recent versions including 2008 or 2010. It's talking about permissions issues and not specific features related to the IDE or framework used.
If you don't have permissions to do something that requires administrative privileges it doesn't really make a difference. :(
 
0
 
LVL 11

Author Closing Comment

by:Robb Hill
ID: 33793019
Thanks this gave me the reasoning to get the developers the admin access they needed rather the workaround hack..thanks to all
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VB.NET 1 21
start a process from a service 3 21
Winform Module - What is the ASP.Net equiv 2 19
VB.NET 2008 - SQL Timeout 9 23
In an ASP.NET application, I faced some technical problems. In this article, I list them out and show the solutions that I found.  I hope it will be useful. Problem: After closing a pop-up window, the parent page should be refreshed automaticall…
User art_snob (http://www.experts-exchange.com/M_6114203.html) encountered strange behavior of Android Web browser on his Mobile Web site. It took a while to find the true cause. It happens so, that the Android Web browser (at least up to OS ver. 2.…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now