SageTVService Minimum Permissions

[sixdoubleo]

On a dedicated server, running Sage as a Service, what permissions does the SageTVService user need?

I have a situation where I need to keep Sage from being able to browse everything on the Sage Server. So I need to give it the absolute minimal permissions. Also, I'd just like to know.

I have created an account "svcSageServer" and given it WRITE access to the recordings directory, the Video, Music, and Pictures import directories. I have also given it WRITE access to C:\Program Files\SageTV. I set the SageTVService to run as that user.

Anything else I'm missing?

It seems to work, but I'm getting some sporadic spikes in CPU utilization for no reason. The thing will be singing along nicely at 4% recording 2 shows.....and then all the sudden it shoots up to 80%. I cannot get this to happen if I run the SageTV GUI and no service.

I'm wondering if maybe the svcSageServer user doesn't have full access to some hardware resource that it needs.

[gplasky]

I thought it needed to be an administrator equivalant. That's the way i set it with no issues.


Gerry

[bcjenkins]

There are some reg keys you need to make sure the user has write access to. fwiw - I tried this a couple of years back, but it never worked 100% for me either. There is/was a forum thread on securing sagetv on windows with all the spots to tweak, however I can't find it.

B

[sixdoubleo]

Thanks. I may fire up Filemon and Regmon and take Sage through its paces and try to identify what files/reg entries it is writing to.

This particular install has the Sage Server also storing personal files and I can't have somebody in the living room browsing personal files on the server.

If worst comes to worst, I can always setup some "Deny" ACL's, but I'd like to not have it come to that. That can be a nightmare to manage.