Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Default privileges on Windows via SSH or Terminal is nt authority\system #4869

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
Tracked by #5051
ghuntley opened this issue Nov 3, 2022 · 2 comments
Closed
Tracked by #5051

Default privileges on Windows via SSH or Terminal is nt authority\system #4869

ghuntley opened this issue Nov 3, 2022 · 2 comments
Labels
stale This issue is like stale bread.

Comments

@ghuntley
Copy link
Contributor

ghuntley commented Nov 3, 2022 •
edited
Loading

Been playing around with our windows templates and noticed the account used for ssh/terminal by default is nt authority\system which is the most powerful account possible on windows.

CleanShot 2022-11-03 at 14 12 23@2x

Over in our linux templates we practice least privileges by default

CleanShot 2022-11-03 at 14 18 24@2x

coder/examples/templates/gcp-linux/main.tf

Line 104 in 6bfdccd

# If user does not exist, create it and set up passwordless sudo

I think we should evolve the templates towards creating an account that belongs to the administrator group but that decision should not be enforced (if people want to have a windows box without any users we should permit it).

$ New-LocalUser "ghuntley" -Password $Password -FullName "Geoffrey Huntley"
$ Add-LocalGroupMember -Group "Administrators" -Member "ghuntley"

Opening for discussion as to steps.
@ghuntley
Copy link
Contributor Author

ghuntley commented Nov 3, 2022

Found an unmerged PR over at https://github.com/coder/coder/pull/3879/files#diff-631d16f5e5ec97f10366bab9ec29c73b91642802f0188da620bc1c186369dfb2R77 which confirms suspicions that our templates should demonstrate the creation of accounts.

@ghuntley ghuntley mentioned this issue Nov 14, 2022
Closed
10 tasks
@github-actions
Copy link

This issue is becoming stale. In order to keep the tracker readable and actionable, I'm going close to this issue in 7 days if there isn't more activity.

@github-actions github-actions bot added the stale This issue is like stale bread. label Jan 14, 2023
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Jan 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
stale This issue is like stale bread.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ghuntley