Minimum Service/File Privileges For Windows Platform?

[jimmyKumbaya]

Hello from a lowly IA type. I'm tasked with tightening the security settings on two Windows 7 machines running NI LabView 2014. The scanner I'm required to use, Nessus, has problems with niLXIDiscovery and NITaggerService, as they grant everyone and authenticated users (resp.) full control of the service directories. Can anyone tell me how to whittle those down to something more respectable, without causing issues for the users?

Thanks,

Jim

[mikeporter]

You need to be talking to NI. What is an IA type?

Mike...

[James-B]

Hey Jim,

niLXIDiscovery has to do with autodetecting certain electrical instruments (mostly power supplies) and can probably be stopped without any adverse affects.

the NITaggerService is a little more hairy because it controls network shared variables.  Once again, disabling it will not everything to stop working, but any code that uses shared variables or that communicates over a network will start to throw errors.  When these errors occur, LabVIEW will throw an error to the effect "NITaggerService is not started".  The programmer will probably try to restart it, figure out you've blocked it, and call you.

In short: You can stop both of these services without greatly affecting LabVIEW.

Here is a white paper that explains all of the services installed with National Instruments software:

http://www.ni.com/white-paper/14487/en/

[jimmyKumbaya]

Cool beans, thanks for the link. I don't want to stop the services, but the scanner insists it's a sizeable hole to allow just anyone (Everyone) full access to those folders. Meantime I've trimmed the two folders down from Everyone/Full to Authenticated Users/ReadAndExecute.

Thanks again for the reference.