Page 1 of 1

Required Folder Permissions in Server 2008/IIS7.5

Posted: Fri Mar 25, 2011 10:16 am
by mouse_8b
Hi all,
I have installed AC 7.0.6 on Windows Server 2008 R2 with IIS 7.5. After install, I set all the folder permissions back to the default settings. However, I noticed I could not edit themes or upload files to the App_Themes folder. I figured it was a permission issue and after granting IUSR read/write/modify permissions it worked (mostly, error below). My question is which directories need write and modify permissions for AC to work properly? I've searched the forums a bit, and that has helped some, but I haven't seen a definitive list of directories that need write permissions. Also, most of the online documentation about folder permissions is aimed at IIS 6 or IIS 7.0, and there are a few differences in 7.5.

I happened upon this problem while trying to edit themes; I couldn't create or upload anything. After giving the profile IUSR (replaced IUSR_MachineName in earlier IIS versions) read/write/modify permissions, I was able to create folders and upload files, but when creating a folder it would show an error that "a folder with that name already existed" (the folder was actually created just fine, but the error is odd).

Which folders need special permissions? Apparantly App_Themes does. What about webcharts, App_Data, Assets, or other folders? And who should get these privelages? IUSR is an account and IIS_IUSRS (replaced IIS_WPG) is a group, but I'm not sure which one is the one I want to grant privelages, if either. As you can probably tell, I'm pretty new at running my own server. I've been managing AC 7.0.2 for about 6 months in a shared environment; having full control of a server feels powerful, but it is a lot to wrap my head around. If it looks like I'm doing something completely wrong, please let me know.

Thanks,
Cade

Re: Required Folder Permissions in Server 2008/IIS7.5

Posted: Sat Mar 26, 2011 11:46 am
by NC Software

Re: Required Folder Permissions in Server 2008/IIS7.5

Posted: Mon Mar 28, 2011 11:01 am
by mouse_8b
After a bunch of seemingly inconsistant tests, I wound up granting permissions to "IIS APPPOOL\Classic .NET AppPool" since that is the profile that ASP.NET is running under. Granting permissions to "Network Service" and "IUSR" did not pass TestPermissions.aspx, but "IIS_IUSRS" and "IIS APPPOOL\Classic .NET AppPool" did pass with permissions. After seeing the folder creation error all morning under a variety of permission settings, it has mysteriously vanished as well. It looks like everything is working at the moment.