The following table illustrates the base software configuration used during the development and testing of Building Secure ASP.NET Applications.
Base Configuration | Notes |
---|---|
Windows 2000 SP3 .NET Framework SP2 | For more information, see the following Knowledge Base article: "INFO: Determining Whether Service Packs Are Installed on .NET Framework" (http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318785) The .NET Framework Service Pack 2 can be downloaded from: http://msdn.microsoft.com/netframework/downloads/sp/default.asp |
ASP.NET | Notes |
---|---|
Running ASP.NET on a domain controller | In general, it’s not advisable to run your Web server on a domain controller, because a compromise of the machine is a compromise of the domain. If you need to run ASP.NET on a domain controller, you need to give the ASP.NET process account appropriate privileges as outlined in the following Knowledge Base article: "BUG: ASP.NET Does Not Work with the Default ASPNET Account on a Domain Controller" (http://support.microsoft.com/default.aspx?scid=kb;en-us;q315158) |
ASP.NET Session State Security Update | http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39298 |
MDAC | Notes |
---|---|
MDAC 2.6 is required by the .NET Framework | Visual Studio .NET installs MDAC 2.7 |
SQL Server 2000 | Notes |
---|---|
SQL Server 2000 SP2 |