Reduce system service operation Permissions

From: network security blog

In the last article, SQL Server Security Settings mentioned some SQL Security Settings
This time, the methods for reducing System Service Permissions, such as apache, mysql, and sqlserver
We will first use apache for demonstration.

Create an apcache startup account, and then place the user group of the startup account to the Guests group.
Then, set the PHP5 directory and APACHE directory to read-only, and do not allow write (the permission must be inherited) (do not pay attention to my computer name --#)

Open the apache directory and find
Error directory and logs directory
Set to: readable and writable

Find the website directory and set it to readable and writable (give this permission as you can)

Open the management tool-service, find the apache service, right-click the service, set properties, and log on
For example, Set

Then restart the service.
Of course, mysql sqlserver can also be set in this way