<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <title>Security consideration</title> </head> <body><div class="manualnavbar" style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="win32service.resources.html">Resource Types</a></div> <div class="next" style="text-align: right; float: right;"><a href="win32service.constants.html">Predefined Constants</a></div> <div class="up"><a href="win32service.setup.html">Installing/Configuring</a></div> <div class="home"><a href="index.html">PHP Manual</a></div> </div><hr /><div id="win32service.security" class="section"> <h2 class="title">Security consideration</h2> <p class="para"> This extension needs administrator privileges for some actions such as <a href="function.win32-create-service.html" class="link">create</a>, <a href="function.win32-delete-service.html" class="link">delete</a>, <a href="function.win32-start-service.html" class="link">start</a>, <a href="function.win32-stop-service.html" class="link">stop</a>, <a href="function.win32-pause-service.html" class="link">pause</a> and <a href="function.win32-continue-service.html" class="link">continue</a>. This requirement can cause an elevation of privileges if the service control is available from the web interface or remote control. </p> <p class="para"> You can set the ACL on the service after adding it into SCM to delegate the current administration tasks to an non administrator account or service account. For further instructions, see the <a href="https://support.microsoft.com/en-us/help/914392/best-practices-and-guidance-for-writers-of-service-discretionary-acces" class="link external">» Microsoft Knowledge Base</a>. </p> </div><hr /><div class="manualnavbar" style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="win32service.resources.html">Resource Types</a></div> <div class="next" style="text-align: right; float: right;"><a href="win32service.constants.html">Predefined Constants</a></div> <div class="up"><a href="win32service.setup.html">Installing/Configuring</a></div> <div class="home"><a href="index.html">PHP Manual</a></div> </div></body></html>
