http://www.dslreports.com/forum/r18219178 en Sun, 22 Nov 2009 22:11:36 EDT Sun, 22 Nov 2009 22:11:36 EDT http://www.dslreports.com/forum/remark,18229757 gwion : You should, ideally, be running it as a service, anyway... it's grossly less secure run as an application...

Running as a service, the interface is universally accessible from any account, and can be secured using its own password mechanism. Long as you have the password, or don't set one up, you can fully access it from any account.

I've always used 2.15 since I started using XP, and the only problem it can cause is a freeze with laptops entering hibernate or standby. I never use either, myself, anyway, so I've had no difficulty transitioning. 2.1.5 runs just fine on XP, no problems whatsoever, here.

Run it as a service, though, unless you have the hibernate/standby issue on a laptop, and consider that a priority over "best practice" security. I preferred to disable hibernation, myself, over running as an app. A service runs at a higher priority than a user launched app; it has certain inherent protections around itself (like, for instance, it's hard to stop (by script, for example) from a limited user account, just to name one). Mainly, it starts almost when the system does, as opposed to after you're logged in. That allows you to control packets even while no user is logged in, during startup, and so forth. Loaded as an app, you have to start it after logging in, and it stops with everything else when you're logged off. The TCP-IP stack, on the other hand, is always running, when your computer is... and it's always able to access the internet... it's unprotected during startup and as long as the firewall isn't started, unless you run the firewall as a service. That's a big potential security hole...
--
Semper Eadem
--
Ils ont change ma chanson ma
Ils ont change ma chanson
C'est la seule chose que je peuz faire
Et ce n'est pas bon ma
Ils ont change ma chanson.
...]]> http://www.dslreports.com/forum/remark,18229757 Wed, 25 Apr 2007 02:59:17 EDT http://www.dslreports.com/forum/remark,18224946 Erronius : Kerio 2.15 runs fine on my XP Pro machine and I have no problems using and administrating it under a Limited User account. However, you have to run it with Administrator privileges. So, if you want to start it manually in a Limited Account, you have to use the "run as" command in which case it runs as a application or, if you wish, you can (from a Administrator account) enable to run at start up in which case it will run as a service in all of your accounts.

There are several threads in this forum on this subject and you might want to search for them for more information.]]> http://www.dslreports.com/forum/remark,18224946 Tue, 24 Apr 2007 10:00:02 EDT http://www.dslreports.com/forum/remark,18219178 HA Nut : I've been thinking about trying 2.15 again since I've moved to XP Home. (I had tried 2.15 on my ancient 98SE laptop but had some "issues" and didn't stay with it.) I'm currently running ZAF but would like to have more control.

One thing I'm committed to is the use of a Limited User account. So if 2.15 is difficult (or impossible) to administer under a Limited account, I'll stop further investigation...

TIA :)]]> http://www.dslreports.com/forum/remark,18219178 Mon, 23 Apr 2007 10:33:13 EDT