Microsoft KB Archive/192039

= INFO: Security Issues with RAD Remote Development Support =

Article ID: 192039

Article Last Modified on 8/11/2005

-

APPLIES TO

 Microsoft Visual InterDev 6.0 Standard Edition, when used with:  Microsoft Windows NT 4.0

 Microsoft Windows 2000 Standard Edition  Microsoft Visual Studio 6.0 Enterprise Edition

-



This article was previously published under Q192039



SUMMARY
You can install Visual InterDev RAD Remote Development Support as an option on Windows NT or Windows 2000. In Windows NT, this is installed with the Windows NT 4.0 Option Pack and is automatically installed if the Windows NT 4.0 Option Pack is installed as a part of the Visual Studio 6.0 install process. In Windows 2000, you can install it through Add/Remove Programs in Control Panel as follows:
 * 1) In Add/Remove Programs, click Add/Remove Windows Components, click Internet Information Services (IIS).
 * 2) Click Details, and select the Visual InterDev RAD Remote Development Support check box.

Visual InterDev RAD Remote Development Support provides the ability for developers to install and register components on a server from a remote Visual Studio 6.0 client. While this function is both convenient and useful, it creates the potential for a security breach on the server where it is enabled.

Currently, Windows NT Administrators can allow developers access to a server while restricting them from the ability to install and register components. Installing Visual InterDev RAD Remote Development Support will give any Visual Studio 6.0 developer with "Author" permissions the ability to install and register a component (from a Visual Studio 6.0 client) that could potentially be harmful to the server and/or breach server security.

Windows NT Administrators should be aware of and consider these implications when enabling Visual InterDev RAD Remote Development Support.

<div class="moreinformation_section">

MORE INFORMATION
For more information on Visual InterDev RAD Remote Deployment Support, see the following section of the Visual Interdev Documentation:

Visual InterDev 6.0 Documentation: Using Visual InterDev; Building Integrated Solutions; Integration Tasks; Deploying and Maintaining Web Applications; Deploying an Integrated Web Solution

Information on security and Microsoft products can be found at:

http://www.microsoft.com/security

Keywords: kbdeployment kbinfo KB192039

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.