Filter
Top Products
Chapter 5: Configuration Console Security
Altiris Helpdesk Solution User Guide 39
Setting Permissions
Once IIS has authenticated the requesting user, then NTFS permissions on the directory holding the
requested default.aspx file is checked to determine if the user has NTFS read permissions for
the file (usually inherited from the directory). If so, the request is allowed to proceed and a response
page will be generated.
The directories and files being discussed are installed in the web directory created under the
installation location. Following is the directory structure.
Altiris recommends creating local NT groups on the server with IIS, adding domain accounts to
those groups, then giving each group appropriate permissions on each of the five entry point
subdirectories.
To set Web Console permissions, do the following.
1 Create a local group for each class of user:
• Administrator (Admin)
• End User (User)
• Worker (Worker)
• End User (Guest)
• End User (Anon)
Note These groups can be global groups in the domain or local groups on the Web server
(recommended).
To create local groups, you use the
Computer Management tool to create a group called
Administrator (admin) and so on.