Cadet 1st Class Cadet 1st Class
Cadet 1st Class
8045 views

Running WebInspect as Administrator

Jump to solution

Running WebInspect as Windows Administrator is fine for most of our installations. However we have hired a contractor to perform some WebInspect scans and we have a corporate policy against allowing contractors to use Administrator accounts. Is there any documentation that exactly defines what admin privileges WebInspect requires? If so we might be able to setup a restricted admin account to allow the contractor to run WebInspect (or via a runas) but do little else. Thanks in advance.

Labels (1)
0 Likes
1 Solution

Accepted Solutions
Micro Focus Expert
Micro Focus Expert

Unfortunately, we have not gotten any details from our development team other than Local Administrator rights are required to both install and to run WebInspect.  Browsing past KB articles, it appears that there could be issues with Macro Recording, Proxying, UI display, and other issues related to the WebInspect Root Certificate and also for the IE AppSec Plugin.  There are probably additional issues with running as a non-Admin account that have not yet surfaced.

The Fortify System Requirements document for 4.30 (WebInspect 10.40), states the following:

(Ref:  )

Running as Administrator

HP WebInspect requires administrative privileges for proper operation of all features. Refer to your Windows

operating system documentation for instructions on changing the privilege level to run WebInspect as an

administrator.


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify

View solution in original post

0 Likes
1 Reply
Micro Focus Expert
Micro Focus Expert

Unfortunately, we have not gotten any details from our development team other than Local Administrator rights are required to both install and to run WebInspect.  Browsing past KB articles, it appears that there could be issues with Macro Recording, Proxying, UI display, and other issues related to the WebInspect Root Certificate and also for the IE AppSec Plugin.  There are probably additional issues with running as a non-Admin account that have not yet surfaced.

The Fortify System Requirements document for 4.30 (WebInspect 10.40), states the following:

(Ref:  )

Running as Administrator

HP WebInspect requires administrative privileges for proper operation of all features. Refer to your Windows

operating system documentation for instructions on changing the privilege level to run WebInspect as an

administrator.


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify

View solution in original post

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.