Web Security
Least Privilege Account and Random Security
Enhancements to .NET 2.0
|
Developing applications in Visual Studio.NET 2003 was difficult to setup
with a
least privilege account. As a results, when developing an application
under a high privilege account created challenges when the application
was deployed and executed with an account that run with reduced
privileges. Thus, many things that worked in Development environment
would immediately fail when executed under a user context.
Visual Studio 2005 was modified to allow the developer to write and
debug in an least privilege account. And as a bonus Visual Studio 2005
include two new and cool features—Secure String and the XML Encryption
API that need to be explored further. |