2

I was wondering if there was a way on Windows to bind to a <1024 port as a standard user?

I am aware that this requires Admin privilege but can I approve the request with Admin but run the actual service as a lower-privileged user?

I am reconfiguring a Windows server that I did not setup and do not know who did. They have a service binding to a lower port running as Administrator but I want to run it as standard user.

Also, running is Microsoft IIS on port 80, but that is running as lower privileged 'iis/apppool' user. Is there a way to do that same thing for other services/applications?

Worst comes to worst, I will just run the service on a higher port but would be nice to keep it where it's at.

Thank you

1
  • "Also, running is Microsoft IIS on port 80, but that is running as lower privileged 'iis/apppool' user" - When you use IIS, it's actually http.sys (a kernel-mode driver) that listens on port 80, which then uses the Windows Process Activation Service (WAS) to route the connection's data to the right w3wp.exe instance (i.e. the IIS worker process does not actually start a listening socket).
    – Dai
    Commented Jul 8 at 6:57

0

You must log in to answer this question.

Browse other questions tagged .