Navigation:  Installation Guide > Webserver Installation >

Permissions

Previous pageReturn to chapter overviewNext page

The installation directory will be used for web access, so set at least read/execute permissions for the user under which the IIS Application Pool will run. On IIS7 machines, that will be typically "Network Service". Whereas on IIS6 machines the “ASPNET” account is used. Also the "IUSR" account will need read permission (to serve static pages, images, style sheets, java script files) on the full directory.
The 3 userfiles directories (and their subdirectories) need extra permissions, being ‘Modify’ and ‘Delete’ for the "Network Service" or "ASPNET" user. So, in short:

IIS6:
o"ASPNET": read/execute on /SMT-X SSP7/ + subfolders
o"IUSR": read on /SMT-X SSP7/ + subfolders
o"ASPNET": full control on /SMT-X SSP7/Common/UserFiles + subfolders
o"ASPNET": full control on /SMT-X SSP7/Forms/UserFiles + subfolders
o"ASPNET": full control on /SMT-X SSP7/Workflow/UserFiles + subfolders
IIS7:
o"Network Service": read/execute on /SMT-X SSP7/ + subfolders
o"IUSR": read on /SMT-X SSP7/ + subfolders
o" Network Service ": full control on /SMT-X SSP7/Common/UserFiles + subfolders
o" Network Service ": full control on /SMT-X SSP7/Forms/UserFiles + subfolders

" Network Service ": full control on /SMT-X SSP7/Workflow/UserFiles + subfolders

The folders are used to write runtime files to log the application errors, to store user uploaded files, etc.

For all 6 virtual directories:

- Right-click on the name, open tab "Virtual Directory" , change "Execute permissions" to "Scripts only".

 

 

 

Normally, in IIS7, it is defaulted to this setting, if not:

Select the static virtual directory, double-click on  "Handler Mappings":

 

Right click on "Edit feature permissions" and ensure that 'read' and 'script' are checked.