MailSite Knowledge Base

• MailSite 8.x
• ExpressPro 8.x
• Express 8.x

ExpressPro NT account impersonation

By default ExpressPro will run the local MSIISUSER account or the service account you entered during the install process. Should you wish to use a different account you will need to change the user name and password in the following places:

Windows XP, Windows 2000, and Windows 2003 running in IIS5 isolation mode

1. The anonymous user impersonation setting on the ExpressPro virtual directory (accessed via the Directory Security properties tab).
2. The anonymous user impersonation setting on the WebCal virtual directory.
3. The anonymous user impersonation setting on the WSS virtual directory.
4. The impersonation settings in the MailSite\ExpressPro\Web\web.config file. by default these will look like:
   
   <identity impersonate="true" userName="registry:HKLM\SOFTWARE\Rockliffe\MailSite\ExpressPro\identity\ASPNET_SETREG,userName" password="registry:HKLM\SOFTWARE\Rockliffe\MailSite\ExpressPro\identity\ASPNET_SETREG,password" />
   
   And need changing to:
   
   <identity impersonate="true" userName="DOMAIN\USER" password="PASSWORD" />
5. The impersonation settings in the MailSite\ExpressPro\WebCal\web.config file.
6. The impersonation settings in the MailSite\ExpressPro\WSS\web.config file.

Windows 2003

1. The anonymous user impersonation setting on the ExpressPro virtual directory (accessed via the Directory Security properties tab).
2. The anonymous user impersonation setting on the WebCal virtual directory.
3. The anonymous user impersonation setting on the WSS virtual directory.
4. The impersonation account of the ExpressPro application pool. (The application pool is located in IIS under 'Application Pools'. The account settings are found on the 'Identity' properties tab.)
5. The user also needs to be made a member of the IIS_WPG NT users group on the local machine.

ExpressPro User Permissions

The user that ExpressPro runs as needs to have the following file permissions:

1. Full Control on the BOX directory.
2. Modify Control on the 'MailSite\ExpressPro' directory, sub-folders and files.
3. Modify Control on the 'MailSite\Timezones' directory and sub-files.
4. Modify Control on the SPOOL directory.
5. Modify Control on the '%WINDIR% \Temp' directory.
6. Modify Control on the '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files' directory

• 10454:ExpressPro Returns Service Unavailable
  
• 10104:Security & Permission Guide lines