How to Secure Microsoft Transaction Server Administration (170819)

SUMMARY

Microsoft Transaction Server can provide security for all administration settings. By default, Microsoft Transaction Server administration security is disabled. To enable administration security, perform the steps listed in the MORE INFORMATION section of this article. After authentication is enabled, only the Windows NT users and groups listed as members of the Administrator role will be able to perform administration tasks with Microsoft Transaction Server Explorer.

MORE INFORMATION

To enable administration security, perform the following steps:

I. Secure the Microsoft Transaction Server Registry

Start Regedt32.
Select the HKEY_LOCAL_MACHINE\Software\Microsoft\Transaction Server key.
On the Security menu, click Permissions.
In the Registry Key Permissions dialog box, change the permissions of the Everyone group from "Special Access" to "Read-Only."
Click to select the "Replace Permission on Existing Subkeys" check box, and click OK to change the permissions.

II. Add Yourself to the System Package's Administrators Role

In Microsoft Transaction Server Explorer, select the System package.
Select the Users pane of the Administrators role.
On the File menu, click New.
In the Add Users And Groups To Role dialog box, add yourself to the Add Names list box and click OK.

III. Enable Authentication on the System Package

Select the System package.
Right-click the package and click Properties on the context menu.
On the Security tab, click to select the Enable Authorization Checking check box.
Click OK.

You will have to stop all server processes on the computer before the authorization checking takes effect. Now only you will be able to perform administration tasks with Microsoft Transaction Server Explorer. Others will have read-only privileges, allowing them to view but not change the various Microsoft Transaction Server and package settings.