Hi Mark, Thanks for your explanation and suggestion. For my use case, I have used the below option and its working fine. ============================= --ServiceUser="LocalSystem" =============================
Thank you very much for showing the way. 😊 Regards Rajib -----Original Message----- From: Mark Thomas <ma...@apache.org> Sent: 26 February 2024 14:23 To: users@tomcat.apache.org Subject: Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9 [You don't often get email from ma...@apache.org. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] On 26/02/2024 06:11, Saha, Rajib wrote: > Hi Experts, > > In our product, we are using Tomcat [OriginalFileName: prunsrv.exe] for > creating a service[Say, Service-A]. It's a huge product running in market for > last 20 years. > We are in progress of moving from Tomcat-8 to tomcat-9. > > When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In "Services" > desktop app, we can see the service is created with "Local System" in "Log On > as". > When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in "Services" > desktop app, we can see the service is created with "Local service" in "Log > On as". > > Looks like "Local service" has less power than "Local System". > Due to it, Service-A created with Tomcat-9 failing for several operation > inside product. That should be a security concern. Local System is broadly equivalent to local administrator. You generally don't want to be running Tomcat under Local System. > Can somebody suggest, how we can create a service with tomcat-9, with the > privilege of "Local System"? Have you looked at the documentation? https://tomcat.apache.org/tomcat-9.0-doc/windows-service-howto.html Look for "--ServiceUser" Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
