[HOWDO] deprive wampserver administrative rights
Posted by: bunak (---.50.90.212.it-tv.org)
Date: March 14, 2015 01:04PM

This is instruction how can wampserver run under users right

*) create a local account (as example service-apache) in Users group. Don't grant Administrators. Create password for new account.

*) in Local Security Policy \ Local Policies \ User Rights Assignment \ Log on as a service click Add User or Group, and then add the service-apache to the list of accounts that possess the Log on as a service right.

*) Setting NTFS Permissions for service-apache as allow modify on those folders:
_ c:\wamp\www\
_ c:\wamp\logs\
_ c:\wamp\tmp\
_ c:\wamp\bin\apache\apache[x.x.xxxx]\logs\
_ c:\wamp\bin\mysql\mysql[x.x.xxxx]\data\ - or your folder that defined in mysql.ini

*) In Service Control Manager, set account service-apache for wampapache and wampmysqld.

*) if you work as user and want start and stop wampserver as user with tray-icon, it is need grant right to start and to stop service wampserver. Download and install subinacl.exe tool from Microsoft web-site. Than
C:\Program Files\Windows Resource Kits\Tools>subinacl.exe /service wampapache /GRANT=Users=TOP
C:\Program Files\Windows Resource Kits\Tools>subinacl.exe /service wampmysqld /GRANT=Users=TOP



Edited 2 time(s). Last edit at 03/14/2015 01:08PM by bunak.

Options: ReplyQuote


Sorry, only registered users may post in this forum.