|
|
The following table illustrates the base software configuration used during the development and testing of Building Secure ASP.NET Applications.
|
Base Configuration |
Notes |
|---|---|
|
Windows 2000 SP3 .NET Framework SP2 |
For more information, see the following Knowledge Base article: “INFO: Determining Whether Service Packs Are Installed on .NET Framework” (http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318785) The .NET Framework Service Pack 2 can be downloaded from: http://msdn.microsoft.com/netframework/downloads/sp/default.asp |
|
ASP.NET |
Notes |
|
Running ASP.NET on a domain controller |
In general, it’s not advisable to run your Web server on a domain controller, because a compromise of the machine is a compromise of the domain. If you need to run ASP.NET on a domain controller, you need to give the ASP.NET process account appropriate privileges as outlined in the following Knowledge Base article: “BUG: ASP.NET Does Not Work with the Default ASPNET Account on a Domain Controller” (http://support.microsoft.com/default.aspx?scid=kb;en-us;q315158) |
|
ASP.NET Session State Security Update |
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39298 |
|
MDAC |
Notes |
|
MDAC 2.6 is required by the .NET Framework |
Visual Studio .NET installs MDAC 2.7 |
|
SQL Server 2000 |
Notes |
|
SQL Server 2000 SP2 |
|
|