X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.6 required=5.0	tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,T_TO_NO_BRKTS_FREEMAIL
X-Spam-Check-By: sourceware.org
MIME-Version: 1.0
Date: Mon, 17 May 2010 12:21:53 -0400
Message-ID: <AANLkTimNEa0kj73JlAlWxvMvwrybXRK8W7CFZSX1A4lN@mail.gmail.com>
Subject: 1.7 sshd - Alternative for cyg_server account?
From: Greg Fury <gregfury AT gmail DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=ISO-8859-1
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Excuse me for my lack of Windows security knowledge.

I'm getting some pushback from our Windows admins while trying to
implement sshd (1.7) on Windows server 2003.

They are concerned about the cyg_server account being a local
administrator.  Saying it's another account that could be compromised,
and they would like to avoid it.

Is this a valid concern?
Are there alternatives to creating this account?
Could we run directly under Administrator?

Thanks for your help.

-- 

-Greg

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple