Get the latest tech news
(Reasonably) secure Azure Pipelines on-prem deployments
One of the major wins on our thus far has been automating deployments to our internal IIS servers. This includes things like permission minimization,...
Trying to implement a deployment flow from Azure Devops to an on-prem IIS server, where every account is not an administrator, is a surprisingly difficult task. I guess you could configure the groups the virtual account runs as, but seeing as the default is local Administrators, and this is the recommended approach, it's all good 🤷. I think it's very dangerous that the default PowerShellOnTargetMachines task requires an administrator account, which makes the whole security model feel like a joke.
Or read this on Hacker News