Chapter 5: Configuration | Console Security |
Setting Permissions
Once IIS has authenticated the requesting user, then NTFS permissions on the directory holding the requested default.aspx file is checked to determine if the user has NTFS read permissions for the file (usually inherited from the directory). If so, the request is allowed to proceed and a response page will be generated.
The directories and files being discussed are installed in the web directory created under the installation location. Following is the directory structure.
Altiris recommends creating local NT groups on the server with IIS, adding domain accounts to those groups, then giving each group appropriate permissions on each of the five entry point subdirectories.
To set Web Console permissions, do the following.
1Create a local group for each class of user:
•Administrator (Admin)
•End User (User)
•Worker (Worker)
•End User (Guest)
•End User (Anon)
Note These groups can be global groups in the domain or local groups on the Web server (recommended).
To create local groups, you use the Computer Management tool to create a group called
Administrator (admin) and so on.
Altiris Helpdesk Solution User Guide | 39 |