Jim Gleason (Customer) asked a question.
Best practice for File folder permissions
We just moved our Moveit server to AWS, security is good, discovered inbound files are not actually being uploaded. Turns out it is a permissions issue on the Files folder, which is strange because I copied that folder from the original server. Added the Everyone SG with full permissions and it works. What would be the best practice to allow files to be uploaded but still have a level of security.
Hi Jim, is it a local files folder, or a UNC path somewhere? If a UNC path, on the MOVEit Transfer config, what account is specified on the PATHS tab? If you aren't using UNC (so don't have an account specified there), what account is the application pool running as?
So, this was more of a s/ftp upload issue to the Moveit server and what I would suspect is the Files folder. We are not using a UNC path. No specific account listed for the app pool, so I would figure it is a default user/setting. I am more curious to why access was denied. Here is the first part of the error that we noticed when trying to add a new user/account which lead us to realizing why we couldn't upload.
Access to the path 'D:\MOVEitTransfer\Files\1699\382798328' is denied.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
I assume that you already checked the Windows service account and made sure it is in the administrators group?