ACEweb Permissions

The correct permissions must be set to run ACEweb.

IIS Internet User Account Permissions

The IIS Internet User account (e.g. IIS_IUSRS) must have the following file permissions:

1. Full Control of the WC temp folder (as specified in web.config file in the wconnect folder, default is c:\temp\wc\).
2. Read and Execute access to the Wconnect folder and all its subfolders.

The IIS Internet User Account(s) should NOT have access to the inetpub\aceweb folder or the Student Manager directory (e.g. manager8 folder).

More file permissions are listed in the ACEweb Running Modes setup instructions.

ACEweb User Account

VFP Version

• If ACEweb and Student Manager reside on the same server, you can allow ACEweb to run under the SYSTEM account.

• If ACEweb and Student Manager reside on different servers, you must run ACEweb under a specific domain-level account. E.g. create a domain-level account called 'AWSA' (ACEweb System Account).

SQL Version

SYSTEM is not allowed access to the SQL database, even if Student Manager and ACEweb are installed on the SQL server. You must run ACEweb under a specific domain-level account. E.g. create a domain-level account called 'AWSA; (ACEweb System Account).

Domain Account

Requirements for the domain-level account:

• The account must be a domain-level account, not a local (machine-level) account. A local account will not have rights to access the Student Manager data on the other server.
• Do not set the account or password to expire. If either are set to expire, ACEweb will not be able to access the Student Manager data once they expire.

ACEweb User Account Permissions

The ACEweb User account must have:

• Full control of the Temp folder (as specified in the wc.ini).
• Full control of the Windows > Temp folder.
• Full control of the ACEweb folder (e.g. inetpub\aceweb) and all its subfolders.
• Full control of the Wconnect folder and all its subfolders (e.g. inetpub\wwwroot\wconnect).
• Full control of the Student Manager folder and all its subfolders, including gatecop and extend.
• SQL Version: ownership of the SQL database.

If ACEweb and Student Manager reside on the same server, you can use a local account. However, if Student Manager or the SQL database reside on a different server, the user account must be a domain-level account.