Automatic Start up using reg key RUN

[skeptic Mike]

(17-10-2016 14:34)simoncn Wrote:  

(17-10-2016 13:39)skeptic Mike Wrote:  2: Install MinimServer as a windows service with a restricted virtual service account. I've described a way of doing this here: https://forum.minimserver.com/showthread...3#pid21793 .
MinimServer is then running with no more rights than it needs, it can read the programs it needs, and your music library (because you've given it permissions to do that), and it can write to its own profile. The downside is that this is much more complicated, and you need to understand what you are doing. It also isn't a supported configuration, although it's essentially identical to the configuration you'd use on a linux server.

MinimServer does support running from a user account without administrator privilege. Isn't this equivalent to what you are describing? If so, this approach can be regarded as being a supported configuration.

I guess it depends on what you mean by a supported configuration. I wanted to make it clear that someone choosing my suggested method of running MinimServer on windows as a service couldn't expect that you (Simon) would be able to help them if it didn't work, but using the documented technique (my "method 1") did work. i.e. the onus is on that person to assure themselves that they have implemented things correctly, and that they can translate suggestions such as: "delete the lock file found in ..." appropriately.

I tried to make sure that my suggestions corresponded very closely to running as an ordinary unprivileged user, so I'm reasonably confident about them. But to take one example, I suggest the following command line options to the (non-Windowing) java executable:

-jar "C:\Program Files\MinimServer\lib\mserver.jar" --set watch.view=console --noprompt

I found them by looking to see what happened on a linux install, not from the official documentation for MinimServer on windows.

What I wanted to emphasise was that MinimServer is designed (correctly in my view) to run with minimal privileges, and that it can be run as a service in that way on modern versions of windows. I've been a keen advocate of "the principle of least privilege" for years. Running it as system either directly in a startup script, or indirectly as a service run as system is a really bad idea, that should be strongly discouraged.