NetTcp Binding

Note: If the NetTcp Port Sharing Service is not running, no additional permissions are required — though this is uncommon in practice.

When using NetTcp binding, the user's Security Identifier (SID) must be added to the following configuration file:

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe.config

Built-in Windows service accounts — Local System, Network Service, and Local Service — already have their SIDs included in this file, so no changes are needed if one of these accounts is used.

For any other account, add its SID to the allowAccounts section under the net.tcp configuration. To do this, follow these steps:

Add account to NetTcp

1. Uncomment the relevant lines in the configuration file:

   Remove or comment out the built-in account labels using proper XML syntax (replace // with <!-- -->).
   

2. To retrieve a user's SID, run:

   wmic useraccount where name="username" get sid

3. Restart the NetTcp Port Sharing Service for changes to take effect.

Revoke User Permissions

To revoke user permission, do the following:

4. Delete the user's security identifier (SID) entry from the configuration file.

5. Restart the NetTcp Port Sharing Service.