question

lavanyadeepak avatar image
0 Votes"
lavanyadeepak asked SamWu-MSFT commented

Alternative to provide Local Administrative Privilege

Our developer team is in need of Local Administrator Privileges so that the following options they can make us of

1) Publish in Visual Studio
2) Create Website/Virtual Directory and debug through Local IIS

However our compliance team is skeptical about allowing these exception. Since we do not have an Active Directory setup and team is distributed is there a way to have another account type in Local Users/Group in Windows 10 systems to avoid the developer user accounts being added to Administrator groups.

windows-10-networkwindows-server-iis
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@lavanyadeepak It's impossible from a security perspective.

0 Votes 0 ·

1 Answer

lextm avatar image
0 Votes"
lextm answered

Impossible. Debugging certain projects on IIS (ASP.NET for example) always requires administrator permissions, so that the debugger can attach to IIS worker processes running in system session (session 0).

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.