I have an executable installing a service that I want to run on my server.
It is working as expected while
Run as administrator. However I don't want to give it the control over the whole server. I would rather limit its permissions to whats necessary only.
I used Process Explorer to find out what DLLs are executed when app works in the admin mode. These were generic libraries from
C:\Windows\Globalizaion that are accessible to custom app's user anyway.
I have given the app's custom user
Full control permissions to all the location it uses that I know of.
Is there a way to check for locations/permissions app is using? Do you have any other ideas?
Unfortunetely the program's provider isn`t as helpful as one would expect.