Article ID: 235874
Article Last Modified on 8/6/2002
APPLIES TO
- Microsoft Proxy Server 2.0 Standard Edition
This article was previously published under Q235874
SUMMARY
When you run Proxy Server 2.0 on an Internet Information Server computer, certain Windows NT File System (NTFS) access permissions are required.
MORE INFORMATION
The following lists the proper NTFS permissions:
- \Program Files\Common Files (including all subdirectories): READ (RX)
- \temp (including all subdirectories): CHANGE (RWXD)
- \winnt: READ (RX)
- \winnt\system32: READ (RX)
- \winnt\system32\inetsrv: READ (RX)
- \inetpub\scripts: READ (RX)
- \inetpub\scripts\proxy: READ (RX)
- \urlcache : CHANGE (RXDW) Please ensure that the NTFS permissions list the Administrators group and the System account with Full Control on each of these folders.
Also add the Everyone group to these permissions as well. If you are using Accces Control and you want to maximize security, add the user(s)/group(s) with the applicable NTFS permission as listed above for each folder. For example, if you have a group called "ProxyUsers," apply NTFS permissions to the folders in the "More "nformation" section to each folder with the NTFS permission(s) listed above for each folder. Microsoft Web Proxy records and places in the Proxy log the Proxy user through Microsoft Internet Information Server (IIS) interactively, so if you are using only the anonymous account (IUSR_computer_name), you must apply NTFS permissions for this account to the above folders.
NOTE: For servers using Microsoft BackOffice Small Business Server (SBS) 4.0, 4.0a, and 4.5, substitute \winnt.sbs for \winnt in the above paths. In SBS, these permission settings are only for the computer running Proxy Server 2.0. You may still need to verify default permissions for additional services that may not involve proxy (such as \Company Shared Folders, \User Shared Folders, and \SmallBusiness folders).
Keywords: KB235874
