Compiled code is by default written to ColdFusion8\wwwroot\WEB-INF\cfclasses, and logs are written ColdFusion8\logs so at the very least the coldfusion account should have write permissions there...
: Why would CF need to modify (or have write privileges at all) on the : directories containing CFML sites/code? Shouldn't read-only : privileges there be sufficient? : -dhs : Dean H. Saxe, CISSP, CEH : [EMAIL PROTECTED] : "[T]he people can always be brought to the bidding of the leaders. : This is easy. All you have to do is to tell them they are being : attacked, and denounce the pacifists for lack of patriotism and : exposing the country to danger. It works the same in every country." : --Hermann Goering, Hitler's Reich-Marshall at the Nuremberg Trials : On Jul 10, 2008, at 1:58 PM, John Mason wrote: : > Here's the basic run down. : > : > Create a new account called 'coldfusion' : > Go into Local Security Policy -> Local Policies -> User Rights : > Assignment : > Add the 'coldfusion' account to.. : > - Deny log on locally : > - Deny log on through Terminal Services : > - Log on as a service : > : > Next go to regedt32 : > GIve the 'coldfusion' account permissions to modify to : > following (if you have ODBC datasources only) : > HKLM/SOFTWARE/Microsoft/ODBC : > : > Now go into File Explorer : > Give Modify permissions to the following directories : > .../CFIDE : > .../ColdFusion8 or .../JRUN4 (also if you are using a : > different JVM, the account there's permissions there as well) : > Then any directories that contain the cfml sites and code : > : > Next go into Services : > Change into the CF service properties and click the 'Log On' : > tab : > Switch the user from 'Local System' to the 'coldfusion' : > account and enter the password : > Click apply and then restart services - it shoudl properly : > restart under the new account : > : > : > John Mason : > [EMAIL PROTECTED] : > 770.337.8363 : > : > www.FusionLink.com - ColdFusion and Flex hosting : > Now offering VPS Plans running with VMware technology : > Now offering ColdFusion 8 Enterprise hosting : > FREE Subversion hosting : > : > This e-mail message and all attachments transmitted with it may : > contain legally privileged and/or confidential information intended : > solely for the use of the addressee(s). If the reader of this : > message is not the intended recipient, you are hereby notified that : > any reading, dissemination, distribution, copying, forwarding or : > other use of this message or its attachments is strictly prohibited. : > If you have received this message in error, please notify the sender : > immediately and delete this message and all copies and backups : > thereof. : > : > : > : > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of shawn : > gorrell : > Sent: Thursday, July 10, 2008 9:12 AM : > To: discussion@acfug.org : > Subject: [ACFUG Discuss] Minimum required permissions : > : > Hoping that maybe Dave Watts is paying attention to the list today... : > : > I've been looking for a list of directories and permissions : > necessary for using a domain account to run CF on Windows (as : > opposed to Local System), and having little luck. There is an : > article about CF on IIS on the Adobe site, but it is for CF7 and is : > incomplete. Dave did a presentation on a similar topic an referred : > to an article on defusion that looked like it should have the info, : > but defusion is dead. Haven't been able to dig up anything else : > useful on Google. : > : > Does anyone have a list like that? I can kind of guess and test my : > way through it, but a list would save a ton of time. : > : > Thanks : > : > : > ------------------------------------------------------------- : > To unsubscribe from this list, manage your profile @ : > http://www.acfug.org?fa=login.edituserform : > : > For more info, see http://www.acfug.org/mailinglists : > Archive @ http://www.mail-archive.com/discussion%40acfug.org/ : > List hosted by FusionLink : > ------------------------------------------------------------- : > : > ------------------------------------------------------------- : > To unsubscribe from this list, manage your profile @ : > http://www.acfug.org?fa=login.edituserform : > : > For more info, see http://www.acfug.org/mailinglists : > Archive @ http://www.mail-archive.com/discussion%40acfug.org/ : > List hosted by FusionLink : > ------------------------------------------------------------- : ------------------------------------------------------------- : To unsubscribe from this list, manage your profile @ : http://www.acfug.org?fa=login.edituserform : For more info, see http://www.acfug.org/mailinglists : Archive @ http://www.mail-archive.com/discussion%40acfug.org/ : List hosted by http://www.fusionlink.com : ------------------------------------------------------------- Mischa Uppelschoten The Banker's Exchange, LLC. 4200 Highlands Parkway SE Suite A Smyrna, GA 30082-5198 Phone: (404) 605-0100 ext. 10 Fax: (404) 355-7930 Web: www.BankersX.com Follow this link for Instant Web Chat: http://www.bankersx.com/Contact/chat.cfm?Queue=MUPPELSCHOTEN ---------- Original Message ---------- FROM: "Dean H. Saxe" <[EMAIL PROTECTED]> TO: discussion@acfug.org DATE: Thu, 10 Jul 2008 14:06:12 -0400 SUBJECT: Re: [ACFUG Discuss] Minimum required permissions Why would CF need to modify (or have write privileges at all) on the directories containing CFML sites/code? Shouldn't read-only privileges there be sufficient? -dhs Dean H. Saxe, CISSP, CEH [EMAIL PROTECTED] "[T]he people can always be brought to the bidding of the leaders. This is easy. All you have to do is to tell them they are being attacked, and denounce the pacifists for lack of patriotism and exposing the country to danger. It works the same in every country." --Hermann Goering, Hitler's Reich-Marshall at the Nuremberg Trials On Jul 10, 2008, at 1:58 PM, John Mason wrote: > Here's the basic run down. > > Create a new account called 'coldfusion' > Go into Local Security Policy -> Local Policies -> User Rights > Assignment > Add the 'coldfusion' account to.. > - Deny log on locally > - Deny log on through Terminal Services > - Log on as a service > > Next go to regedt32 > GIve the 'coldfusion' account permissions to modify to > following (if you have ODBC datasources only) > HKLM/SOFTWARE/Microsoft/ODBC > > Now go into File Explorer > Give Modify permissions to the following directories > .../CFIDE > .../ColdFusion8 or .../JRUN4 (also if you are using a > different JVM, the account there's permissions there as well) > Then any directories that contain the cfml sites and code > > Next go into Services > Change into the CF service properties and click the 'Log On' > tab > Switch the user from 'Local System' to the 'coldfusion' > account and enter the password > Click apply and then restart services - it shoudl properly > restart under the new account > > > John Mason > [EMAIL PROTECTED] > 770.337.8363 > > www.FusionLink.com - ColdFusion and Flex hosting > Now offering VPS Plans running with VMware technology > Now offering ColdFusion 8 Enterprise hosting > FREE Subversion hosting > > This e-mail message and all attachments transmitted with it may > contain legally privileged and/or confidential information intended > solely for the use of the addressee(s). If the reader of this > message is not the intended recipient, you are hereby notified that > any reading, dissemination, distribution, copying, forwarding or > other use of this message or its attachments is strictly prohibited. > If you have received this message in error, please notify the sender > immediately and delete this message and all copies and backups > thereof. > > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of shawn > gorrell > Sent: Thursday, July 10, 2008 9:12 AM > To: discussion@acfug.org > Subject: [ACFUG Discuss] Minimum required permissions > > Hoping that maybe Dave Watts is paying attention to the list today... > > I've been looking for a list of directories and permissions > necessary for using a domain account to run CF on Windows (as > opposed to Local System), and having little luck. There is an > article about CF on IIS on the Adobe site, but it is for CF7 and is > incomplete. Dave did a presentation on a similar topic an referred > to an article on defusion that looked like it should have the info, > but defusion is dead. Haven't been able to dig up anything else > useful on Google. > > Does anyone have a list like that? I can kind of guess and test my > way through it, but a list would save a ton of time. > > Thanks > > > ------------------------------------------------------------- > To unsubscribe from this list, manage your profile @ > http://www.acfug.org?fa=login.edituserform > > For more info, see http://www.acfug.org/mailinglists > Archive @ http://www.mail-archive.com/discussion%40acfug.org/ > List hosted by FusionLink > ------------------------------------------------------------- > > ------------------------------------------------------------- > To unsubscribe from this list, manage your profile @ > http://www.acfug.org?fa=login.edituserform > > For more info, see http://www.acfug.org/mailinglists > Archive @ http://www.mail-archive.com/discussion%40acfug.org/ > List hosted by FusionLink > ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
