• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Adding access permissions using the hosting_template.xml file

AndorA

Basic Pleskian
Despite great documentation in the Plesk for Windows Advanced Administration guide, I have the feeling I am really misunderstanding something fundamental about the use of the hosting_template.xml file. I hope there's someone who can tell me what I'm doing wrong.

What I want to do is the following. I have an application server that is running under a specific Windows user account (for security reasons I don't want to run it under SYSTEM or NETWORK SERVICE). The only problem is that this user accounts needs to have access to all my virtual domains httpdocs folder. If I add it manually, my sites run just fine. If I don't add it, no sites for me. :(

Now, as I understand it, Plesk will allow me to add security rules to the hosting_template.xml file, so that the Windows user account under which my service runs will have access to all newly created virtual directories' httpdocs folders. However, when adding a rule for a hosting template, an attribute called 'Tag' is mandatory. Whatever tag I choose (I tried all that were specificied on http://download1.parallels.com/Ples...nistration-guide/index.htm?fileName=49496.htm), it either throws an error or just refuses to add my custom permissions. Unfortunately, the documentation on these tags is thin. I can add a tag to add a psaadm account, or a "anonymous IIS user", but all I want to do is add the Windows user account under which my service is running. No tag seems appropriate for that.

Here is why I think I misunderstand something. To me, it seems like three attribuates define exactly the same thing: Account, SidStr, and Tag. An account name I have, and SidStr as well, but how can I find a tag for my custom created Windows user?

I also tried to edit the DiskSecurity.xml file. This works perfect - it adds my Windows user with the exact right permissions to all my files in the virtual host parent directory, even to all the default directories Plesk places there. But NOT to my virtual host folders, the only folders that I actually want to edit.

Any hint here would be greatly appreciated!

Andor
 
Back
Top