User Guide

Chapter 7 Security Options for RoboEngine
59
Notes on file and folder permissions:
§ In Windows NT Server 4.0, the "Change" permission includes
Read, Write, Execute, and Delete.
§ MDAC 2.1 overwrites several files located in WINNT and
WINNT\System32. Refer to
http://support.microsoft.com/support/kb/articles/Q232/0/53.asp
for the complete listing of files installed.
§ A run time group consisting of the IUSR and IWAM system
accounts needs permissions to WINNT in order for database
functionality to work properly. Microsoft Access uses this folder as
a TEMP folder. Database operations done by our software go
through IIS and are authenticated using those accounts.
§ In order to install properly, the Installer needs read permissions
for C:\WINNT\System32\inetsrv\inetinfo.exe, if the file exists.
This allows for the install to properly verify the existence of the
correct version of IIS on the machine and check the version that
is installed. In addition, in order to run IIS Administrator the
permissions above are necessary. To read reports correctly, these
"Change" permissions are necessary. Hence, the request to have
Admin - Change to C:\WINNT\System32\inetsrv.
§ The registry key permission is for database functionality. Giving
the run time group proper permissions to the above-mentioned
key allows the server to read the data source name and location.
It also allows the server to create new keys for new data sources.
After installing the RoboEngine software
After you install the RoboEngine software, you should create a publishing and
reports group. Then, set file permissions for the group.
To create a publishing and reports group:
1 Create a local user group named "RoboPublisher" through the NT User
Manager.
2 Create a user account(s), then add the account(s) to the publishing group.