CF8 Mapping network folder

IT Staff decided to create a Domain user for CF server .....
May be my IT staff is "Stuff" that in our italian dialect means tired

Thanks


Ian Skinner ha scritto:
> If your IT staff are unwilling to let the CF service to run as a domain
> server, then it will not have any permissions to network resources.
>
> By default CF is installed to run as a 'localSystem' user. If one where
> to modify the permissions of what a 'localSystem' user can do on the box
> that CF server is installed on, then CF will be able to do what ever
> 'LocalSystem' has been allowed to do.
>
> But then every service or user that utilizes the 'LocalSystem' account
> will have these same permissions. In my book that is a much worse idea
> then creating a Domain user for the ColdFusion server to run under and
> then specifically allowing that user to do what *AND ONLY WHAT*
> ColdFusion needs to do.
>
>

I agree with Ian here. It is not hard to create a domain user that only has permissions to only what ColdFusion needs. I have ours locked down tight and it works fine in a very secure environment.

If your IT staff are unwilling to let the CF service to run as a domain
server, then it will not have any permissions to network resources.

By default CF is installed to run as a 'localSystem' user. If one where
to modify the permissions of what a 'localSystem' user can do on the box
that CF server is installed on, then CF will be able to do what ever
'LocalSystem' has been allowed to do.

But then every service or user that utilizes the 'LocalSystem' account
will have these same permissions. In my book that is a much worse idea
then creating a Domain user for the ColdFusion server to run under and
then specifically allowing that user to do what *AND ONLY WHAT*
ColdFusion needs to do.

Thanks Jhon,
for different reasons IT staff ask me to look for a solution that avoid
CF runnng as domain user. Do you know if is possible to resolve this
problem setting the network folder permission for the CF "Computer"
insteat ?

Many thanks


jblayter ha scritto:
> You need to make sure that the ColdFusion service runs as a Windows domain
> user. When you are looking at the services control panel you can right click on
> the service > go to properties > go to the log on tab > change the domain
> username and password there. Once changed you will need to restart the service.
>
> Once you have changed that you will be able to access the network over UNC and
> not a mapped drive. So lets say if you were trying to get to your "Z" drive on
> "myserver" you would set your file path to \\myServer\myShare\ to gain access
> to the network.
>

You need to make sure that the ColdFusion service runs as a Windows domain user. When you are looking at the services control panel you can right click on the service > go to properties > go to the log on tab > change the domain username and password there. Once changed you will need to restart the service.

Once you have changed that you will be able to access the network over UNC and not a mapped drive. So lets say if you were trying to get to your "Z" drive on "myserver" you would set your file path to \\myServer\myShare\ to gain access to the network.