I’d like to write a service (that starts up and runs whenever the machine is on) that queries Active directory since the user IIS uses does not have permission to query AD. How do I determine if A) my workstation where I have local admin rights, and B) a shared team workstation will allow me to do this?
Share
Anything you can do as an interactive user can be done by a service with appropriate permissions and configuration, so it isn’t so much an issue of determining if you can, but rather configuring the service so that it can.
Your installation package should request an appropriate set of credentials (and of course must be run by a user with privileges to install such a service). The service itself should simply catch and log any permission exceptions.
As an example – look at the SQL Server installation process. Early on it requests that you specify accounts with the required privileges.