System information

Adobe documentation - Confidential
For maximum security you should consider a more detailed permission structure for the ColdFusion
installation directory to prevent runtime changes to certain resources or configuration. Restrictive
permissions may however break features like security hotfix installation from within ColdFusion
administrator. If you run the ColdFusion Hotfix installer as described in section 2.3, the installer will
execute under your Administrative user account instead of the user account that ColdFusion runs as
(cfuser), allowing for more restrictive file system permissions.
The IIS Application Pool user (iisuser in our examples) must also have permission access the Tomcat IIS
connector. Grant this user permission to the{cf.root}/config/wsconfig/ directory in your ColdFusion
installation directory. Because we have not installed the connector yet you will need to create an empty
wsconfig directory.
Folder
Principal
Permission
{cf.root}
Administrators
Full Control
{cf.root}
cfuser
Full Control
Adobe documentation - Confidential