IIS and NTFS Permissions requirements for PlateSpin Migrate and Protect

This document (7920718) is provided subject to the disclaimer at the end of this document.

Environment

PlateSpin Migrate or Protect installed.

Situation

This article provides the recommended IIS and NTFS Security permissions in order to install and use PlateSpin Migrate or Protect.

Resolution

IIS Permissions:

OFXWEB Virtual Directory:
Anonymous Access: NO
Windows Integrated Authentication: YES

OFXWEB\packages Virtual Directory:
Anonymous Access: YES
Windows Integrated Authentication: NO

ControllerNotification.asmx, ControllerPackageDownload.aspx, and OfxInternal.asmx (under OFXWEB):
Anonymous Access: YES
Windows Integrated Authentication: NO

All other files under OFXWEB Virtual Directory:
Anonymous Access: NO
Windows Integrated Authentication: YES

PLATESPINMIGRATE Virtual Directory:

Anonymous Access: NO
Windows Integrated Authentication: YES

ConfigServiceNotification.asmx and ConfigServiceNotificationData.asmx (under PLATESPINMIGRATE):
Anonymous Access: YES
Windows Integrated Authentication: NO

All other files under PLATESPINMIGRATE Virtual Directory:
Anonymous Access: NO
Windows Integrated Authentication: YES

By default anonymous access is granted using the IUSR_<MACHINENAME> account which is typically part of the GUEST group. Please verify that there are no domain or group policies that may reject remote logins using this account.

NTFS Security Permissions:

LOCATION	ACCOUNT	PERMISSIONS
*- Root of the drive containing the Inetpub folder and the PlateSpin Migrate installation	NETWORK SERVICE	Read
Inetpub, - Program Files, and - Program Files (x86) (Program Files folder/s only require modification if PlateSpin Migrate will be installed to that directory)	NETWORK SERVICE	Read, List Folder Contents, Read & Execute
*- \Documents and Settings\Default User\Local Settings\Application Data	NETWORK SERVICE	Read, List Folder Contents, Read & Execute
\%WINDIR%\Temp	NETWORK SERVICE	Write, Read, List Folder Contents, Read & Execute, Modify
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files And, if it exists: C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files	NETWORK SERVICE	Write, Read, List Folder Contents, Read & Execute, Modify

Note: Any location preceded by "*-" cannot be modified in Windows 2008.
Note: If the Migrate server is a member of the domain, ensure that the location is set to the local machine instead of the domain when adding the NETWORK SERVICE account.

Disclaimer

This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:7920718
Creation Date:16-JUN-06
Modified Date:22-MAR-13
- NetIQPlateSpin Migrate
  PlateSpin Protect

Did this document solve your problem? Provide Feedback