Install on Windows Server Best Practices

[Andrej Baranov]

By default atlassian products install by Windows Administrator.

But it may be safer to create individual users?

For example:

• atlassianjira for JIRA
• atlassianstash for STASH
• atlassianbamboo for BAMBOO
• etc

Does that make sense?

[Pedro Souza]

Hi Andrej,

We strongly recommend to use an individual and dedicated user for JIRA Service, and any other Atlassian Application installed in the Server.

You can find more information on how to change the user on Windows in the page below:

https://confluence.atlassian.com/display/JIRA/Running+JIRA+as+a+Service#RunningJIRAasaService-changinguser

For more information about creating a dedicated user account and defining which directories this account should have write access to, refer to our guidelines

Cheers,

Pedro Souza.

[Andrej Baranov]

What advantages such settings?

[Renjith Pillai]

Andrej, don't mind this answer. The best practice for installing JIRA on Windows will be use Linux instead of Windows.

[Andrej Baranov]

Its hard for us.

[Norman Abramovitz]

There is nothing additional over why you want to have separate accounts for any application.   It limits security exposures.

[Andrej Baranov]

Example. Hacked Jira. It runs under the user Jira. But if Stash work under the user Stash than GIT data will be safe. This is the main idea? But! If activated Crowd with auto login? From hacked Jira hackers can kidnap cookies and substitute them in Stash. And download source code. All right?