Yes. Please post more information about the permissions and registry changes. Hopefully, IPSwitch will verify it in their lab and update the installer and documentation (http://support.ipswitch.com/kb/IM-20051123-DM03.htm#InstallUpgrade) accordingly.
We're not going to upgrade, either, until this issue is satisfactorily resolved. Tuesday, January 3, 2006, 7:29:11 PM, Martin Schaible <[EMAIL PROTECTED]> wrote: MS> Hi Bruce, MS> This is absolutely right. In the most cases SYSTEM does need not full control either. MS> The both accounts IMail works with must be restricted for sure. MS> It can't be the solution, that those users have full control over MS> the Application- and Data-directories. Especially the IIS guest MS> user must run under very limited rights. This affects the registry too. MS> Did somebody already test, if IMail will work, after reducing the MS> rights to the usual read/write/change permissions? MS> IMail 2006 does not strictly separate program and data by MS> default. With a bit registry hacking, a separation is possible. At MS> the end, three or four files need R/W access in the application MS> directory. We made that already for every version of IMail, including 2006 . MS> I have no idea, why we poor admins have fiddle around in the MS> registry to fullfil some basic IT-rules. This separation could be MS> done very very easy by default and would allow to implement a security concept easily. MS> If somebody is interested what have to be done for a 99% MS> separation, i can post more infos. MS> ============================================ MS> Am Mittwoch, 4. Januar 2006 um 00:53 schrieben Sie: >> Full control should NEVER be allowed on a server of any kind! That will >> give full access to anyone who can connect to the site. >> >> The only account having FULL CONTROL is ADMINISTRATOR and SYSTEM. >> >> The user who is logged into the system checking his mail should only be >> allowed CREATE, MODIFY and DELETE, NOT full control. >> >> This is a definitely problem with the latest version of IMail and needs to >> be addresses ASAP. We will not deploy until this is resolved! >> >> Bruce Barnes >> ChicagoNetTech Inc >> ________________________________ >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity Hosting >> Sent: Tuesday, January 03, 2006 16:53 >> To: [email protected] >> Subject: Re: [IMail Forum] 2006 permissions >> Full control? >> Mike Barber wrote: >> Here you will find the permissions necessary >> >> http://support.ipswitch.com/kb/IM-20051123-DM03.htm#InstallUpgrade >> For your scenario you will need to add IUSR_ComputerName to >> d:\imail\ >> ________________________________ >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity Hosting >> Sent: Tuesday, January 03, 2006 5:23 PM >> To: [email protected] >> Subject: [IMail Forum] 2006 permissions >> We have all of our domains on the D drive and it seems that >> permissions are still not corrected after installing 2006.01. This is the >> error I get when I try to save attachment blocking: >> >> "Unable to open attachment blocking file d:\IMail\\ab.txt" >> >> That would indicate a permissions problem but it is reading the >> file. What file permissions should be in place? >> >> Thanks, >> >> Bill >> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ MS> ============================================ ---- Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364 Fax: (972) 788-5049 ---- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
