Encrypting UserName & Password in Lansweeper.Exe.Config

[TiasaMukherjee]

Is there a way to encrypt the username and password in C:\Program Files\lansweeper\Service\lansweeperservice.exe.config ?

Below is the key value pair in the xml config.

<add key="ConnectionString" value="Persist Security Info=False;Data Source=<servername>\<instanceName>;Initial Catalog=lansweeperdb;User ID=lansweeperuser;Password=mysecretpassword0*;Connect Timeout=120"/>

[TiasaMukherjee]

The problem is, we cannot modify group policy for Firewall (domain ) since there are a huge number of laptops in the domain (including other countries) and we want to use lansweeper for a small subset of the domain.

[Hemoco]

See this page : http://www.lansweeper.com/kb/how-to-scan.aspx

[TiasaMukherjee]

If the Lansweeper Service is not running in all the client machines, how will the client machines get scanned ? We are not using the Active Directory Option.

[TiasaMukherjee]

When we install the lansweeper client (Lansweeper Service) it automatically creates the Lansweeperservice.exe.config file in C:\Program Files\lansweeper\Service in all the machines where we install lansweeper client.

[Hemoco]

TiasaMukherjee wrote:
When we install the lansweeper client (Lansweeper Service) it automatically creates the Lansweeperservice.exe.config file in C:\Program Files\lansweeper\Service in all the machines where we install lansweeper client.

You only need one machine with the lansweeperservice.

The lansweeper client is called "lsclient.exe" and it doesn't require any installation.

[TiasaMukherjee]

To give you the background ;

We have installed the lansweeper client on all the laptops/desktops since we don't want to use Active Directory option.
The lansweeperservice.exe.config exposes username and password for lansweeper database. We don't want someone to use this credentials to modify lansweeper database content.

How can we solve this kind of security issue ?

[Hemoco]

TiasaMukherjee wrote:
To give you the background ;

We have installed the lansweeper client on all the laptops/desktops since we don't want to use Active Directory option.
The lansweeperservice.exe.config exposes username and password for lansweeper database. We don't want someone to use this credentials to modify lansweeper database content.

How can we solve this kind of security issue ?

The lansweeperservice.exe.config is only located on your secure server right?

[Hemoco · Accepted solution]

Not by default but you can switch the database/config to integrated authentication (which should work but is not supported)