Hi Don, I will do post more infos. These needs some times which i dont' have at the moment. Hopefully next week...
============================================ Am Mittwoch, 4. Januar 2006 um 14:14 schrieben Sie: > Yes. Please post more information about the permissions and registry > changes. Hopefully, IPSwitch will verify it in their lab and update the > installer and documentation > (http://support.ipswitch.com/kb/IM-20051123-DM03.htm#InstallUpgrade) > accordingly. > We're not going to upgrade, either, until this issue is satisfactorily > resolved. > Tuesday, January 3, 2006, 7:29:11 PM, Martin Schaible <[EMAIL PROTECTED]> > wrote: MS>> Hi Bruce, MS>> This is absolutely right. In the most cases SYSTEM does need not full control either. MS>> The both accounts IMail works with must be restricted for sure. MS>> It can't be the solution, that those users have full control over MS>> the Application- and Data-directories. Especially the IIS guest MS>> user must run under very limited rights. This affects the registry too. MS>> Did somebody already test, if IMail will work, after reducing the MS>> rights to the usual read/write/change permissions? MS>> IMail 2006 does not strictly separate program and data by MS>> default. With a bit registry hacking, a separation is possible. At MS>> the end, three or four files need R/W access in the application MS>> directory. We made that already for every version of IMail, including 2006 . MS>> I have no idea, why we poor admins have fiddle around in the MS>> registry to fullfil some basic IT-rules. This separation could be MS>> done very very easy by default and would allow to implement a security concept easily. MS>> If somebody is interested what have to be done for a 99% MS>> separation, i can post more infos. MS>> ============================================ MS>> Am Mittwoch, 4. Januar 2006 um 00:53 schrieben Sie: >>> Full control should NEVER be allowed on a server of any kind! That will >>> give full access to anyone who can connect to the site. >>> >>> The only account having FULL CONTROL is ADMINISTRATOR and SYSTEM. >>> >>> The user who is logged into the system checking his mail should only be >>> allowed CREATE, MODIFY and DELETE, NOT full control. >>> >>> This is a definitely problem with the latest version of IMail and needs to >>> be addresses ASAP. We will not deploy until this is resolved! >>> >>> Bruce Barnes >>> ChicagoNetTech Inc >>> ________________________________ >>> From: [EMAIL PROTECTED] >>> [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity Hosting >>> Sent: Tuesday, January 03, 2006 16:53 >>> To: [email protected] >>> Subject: Re: [IMail Forum] 2006 permissions >>> Full control? >>> Mike Barber wrote: >>> Here you will find the permissions necessary >>> >>> http://support.ipswitch.com/kb/IM-20051123-DM03.htm#InstallUpgrade >>> For your scenario you will need to add IUSR_ComputerName to >>> d:\imail\ >>> ________________________________ >>> From: [EMAIL PROTECTED] >>> [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity Hosting >>> Sent: Tuesday, January 03, 2006 5:23 PM >>> To: [email protected] >>> Subject: [IMail Forum] 2006 permissions >>> We have all of our domains on the D drive and it seems that >>> permissions are still not corrected after installing 2006.01. This is the >>> error I get when I try to save attachment blocking: >>> >>> "Unable to open attachment blocking file d:\IMail\\ab.txt" >>> >>> That would indicate a permissions problem but it is reading the >>> file. What file permissions should be in place? >>> >>> Thanks, >>> >>> Bill >>> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ MS>> ============================================ > ---- > Don Brown - Dallas, Texas USA Internet Concepts, Inc. > [EMAIL PROTECTED] http://www.inetconcepts.net > (972) 788-2364 Fax: (972) 788-5049 > ---- > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ============================================ -- Mit freundlichen Grüssen -------------------------------------------- Merlin Consulting Martin Schaible Bahnhofstrasse 27 CH-8702 Zollikon Phone: +41 44 391 30 00 Fax: +41 44 391 32 49 Mail: mailto:[EMAIL PROTECTED] URL: http://www.merlinconsulting.ch Support: http://support.merlinconsulting.ch GPS: N47 20.235 E8 34.226 -------------------------------------------- News - Neue Produkte: .:. NOD32 Antivirus System .:. BlueDragon .:. Kiwi Syslog Monitor .:. Paessler GmbH .:. Sawmill Loganalyzer .:. SmarterTools -------------------------------------------- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
