Administering Security Settings on Windows Objects

Plesk has a built-in mechanism for customizing security settings for Windows objects on the server disks. You can specify security rules and then have Plesk automatically apply the rules to Windows object security settings. The security files are easily accessible, and once you understand the logic of their use, you can readily customize security settings on any folder or file found on a Plesk server.

Incorrect security settings on Windows objects found on Plesk servers may result is a number of server problems including but not limited to unavailability of site application and services. We recommend that you become acquainted with this section before attempting to modify security settings on folders and files found on Plesk server.

Plesk creates different Windows user accounts to manage servers and to serve Internet requests by IIS. Plesk has to assign the user accounts necessary permissions to access and manage Windows objects on managed servers. When assigning user account permissions, Plesk exercises two different security policies towards Windows objects - Disk security and Hosting security. Security settings for all Windows objects on a Plesk server are initially configured according to the policies during Plesk installation. Server compliance with the policies ensures the maximum security of the Plesk server without compromising server performance. The Windows objects security settings can be further customized. To manage object security settings, Plesk has implemented a flexible system based on Plesk's own security metadata files and the DACL inheritance mechanisms implemented in Windows. Security settings can be customized by using the Plesk security metadata files and Plesk creation utilities that are distributed with Plesk.

Warning: Before making any changes to the security metadata, make a backup copy of the metadata file that you want to modify. For information why backing up security metadata files before modifying them is a good idea, see "Customizing Disk Security" and "Customizing Hosting Security" sections.