Files and permissions for Office SharePoint Server 2007

Applies To: Office SharePoint Server 2007

This Office product will reach end of support on October 10, 2017. To stay supported, you will need to upgrade. For more information, see , Resources to help you upgrade your Office 2007 servers and clients.

 

Topic Last Modified: 2015-03-09

In this article:

  • Installation directory

  • Web site content area

  • Windows directory

  • Installation directory included in Windows SharePoint Services 3.0 that is not included in Office SharePoint Server 2007

This article lists the detailed minimum file permission settings for folders and files created when you install Microsoft Office SharePoint Server 2007. These minimum file permission settings must be in place for Windows SharePoint Services 3.0 to perform as designed.

Installation directory

The following table lists the files and folders in the installation directory for Windows SharePoint Services 3.0. By default, the installation directory is located at the <installation drive>\%COMMONPROGRAMFILES%\Microsoft Shared\Web Server Extensions\12.

Installation directory User Permission Inherit Description

\ADMISAPI

Users

Administrators

SYSTEM

WSS_WPG

WSS_ADMIN_WPG

Read, Execute

Full Control

Full Control

Read

Full Control

Yes

Yes

Yes

Yes

Contains the soap services for the SharePoint Central Administration Web site. If this directory is altered, remote site creation and other methods exposed in the service will not function correctly.

\BIN

Users

Administrators

SYSTEM

Read, Execute

Full Control

Full Control

\CONFIG

Users

Administrators

SYSTEM

WSS_WPG

WSS_ADMIN_WPG

Read, Execute

Full Control

Full Control

Read

Full Control

Yes

Yes

Yes

Yes

Contains files used to extend Internet Information Services (IIS) Web sites to use SharePoint Products and Technologies. If this directory or its contents are altered, Web application provisioning will not function correctly.

\HCCab

Users

Administrators

SYSTEM

Read, Execute

Full Control

Full Control

\Help

Users

Administrators

SYSTEM

Read, Execute

Full Control

Full Control

\ISAPI

Users

Administrators

SYSTEM

Read, Execute

Full Control

Full Control

\LOGS

Users

Administrators

SYSTEM

WSS_WPG

WSS_ADMIN_WPG

<All SharePoint Service Accounts>

LOCAL SERVICE

Read, Execute

Full Control

Full Control

Modify

Full Control

Modify

Modify

No

No

No

No

No

No

No

Contains setup and run-time tracing logs. If the directory is altered, diagnostic logging will not function correctly.

\Resources

Users

Administrators

SYSTEM

Read, Execute

Full Control

Full Control

\TEMPLATE

Users

Administrators

SYSTEM

Read, Execute

Full Control

Full Control

The following table lists the folders for which Windows SharePoint Services 3.0 changes permissions in the Documents and Settings folder of the installation drive (%AllUsersProfile%\Application Data\Microsoft\SharePoint).

Installation directory User Permission Inherit Description

%AllUsersProfile%\Application Data\Microsoft\SharePoint

Administrators

SYSTEM

WSS_WPG

WSS_ADMIN_WPG

Full Control

Full Control

Read

Full Control

No

No

No

No

Contains the file system-backed cache of the farm configuration. Processes might fail to start, and the administrative actions might fail if this directory is altered or deleted.

The following table lists the folders for which Office SharePoint Server 2007 changes permissions in the Program Files folder of the installation drive (%Program Files%\Microsoft Office Servers\12.0).

Installation directory User Permission Inherit Description

%ProgramFiles%\Microsoft Office Servers\12

WSS_WPG

WSS_ADMIN_WPG

Read, Execute

Read, Execute

No

No

Installation location for the Office SharePoint Server 2007 binaries and data. It can be changed at the time of installation. All Office SharePoint Server 2007 features will fail if this directory is removed, moved after the installation, or altered.

%ProgramFiles%\Microsoft Office Servers\12\Bin

Users

LocalService

Read, Execute

Read, Execute

No

No

Installation directory for core SharePoint files. If this access control list is modified, feature activation, solution deployment, and other features will not function correctly.

%ProgramFiles%\Microsoft Office Servers %ProgramFiles%\Microsoft Office Servers\WebServices

WSS_WPG

WSS_ADMIN_WPG

Read

Read, Write

No

No

Root directory where back-end Shared Services Provider (SSP) Web services are hosted, such as Excel and Search. Office SharePoint Server 2007 features that depend on these services will not work if this directory is removed or altered.

%ProgramFiles%\Microsoft Office Servers\WebServices\Root

Users

Read, Execute

No

Root directory where back-end Root Web services are hosted. The only service currently installed there is a search administration service. Some of the search administration functionality will not work if this directory is removed or altered, including search SSP provisioning.

%ProgramFiles%\Microsoft Office Servers\Logs

Users

Administrators

WSS_WPG

WSS_ADMIN_WPG

Read, Write, Execute

Full Control

Read, Write

Full Control

Yes

Yes

Yes

Location where the run-time diagnostic logging is generated. Logging functionality will not function properly if this directory is removed or altered.

%ProgramFiles%\Microsoft Office Servers\Data

Users

Administrators

SYSTEM

WSS_ADMIN_WPG

Read, Execute

Full Control

Full Control

Full Control

No

Root location where local data is stored. The main data stored here are the search indexes. Search functionality stops working if this directory is removed or altered. WSS_ADMIN_WPG permissions are required for search to save and secure data in this folder.

%ProgramFiles%\Microsoft Office Servers\Data\Office Server

WSS_ADMIN_WPG

Full Control

Yes

Root location where local data is stored. Search indexes are stored here. Search functionality stops working if this directory is removed or altered. WSS_ADMIN_WPG permissions are required for search to save and secure data in this folder.

Web site content area

The following table lists the files and folders in the Web site content area. The Web site content area is located at <installation drive>\Inetpub\wwwroot.

Web site content area User Permission Inherit Description

\Inetpub

Note

All directories enclosing the content root will grant LIST permissions to these accounts.

\Inetpub\wwwroot\_vti_pvt

Users

Administrators

SYSTEM

IIS_WPG

Internet Guest Account (IUSR_*)

Read, Execute

Full Control

Full Control

Read, Execute

Special Permissions

\Inetpub\wwwroot\wss

Administrators

SYSTEM

WSS_WPG

WSS_ADMIN_WPG

Full Control

Full Control

Read, Execute

Full Control

No

No

No

This directory (or the corresponding directory under the Inetpub root on the server) is used as the default location for IIS Web sites. SharePoint sites will be unavailable and administrative actions might fail if this directory is altered or deleted unless custom IIS Web site paths are provided for all IIS Web sites extended with SharePoint.

Web.config

Users

Administrators

SYSTEM

IIS_WPG

Internet Guest Account (IUSR_*)

Read, Execute

Full Control

Full Control

Read, Execute, Special Permissions

Special Permissions

wpresources\web.config

Users

Administrators

SYSTEM

IIS_WPG

Internet Guest Account (IUSR_*)

Read, Execute

Full Control

Full Control

Read, Execute, Special Permissions

Special Permissions

Windows directory

The following table lists the files and folders for which Windows SharePoint Services 3.0 changes permissions in the Windows directory (%WinDir%).

Windows directory User Permission Inherit Description

%temp%

Administrators

WSS_ADMIN_WPG

SYSTEM

WSS_WPG

Network Service (for a domain controller only)

Full Control

Full Control

Full Control

Read

Read, Write

Yes

Yes

Yes

This directory is used by platform components on which SharePoint depends. If this access control list is modified, Web Part rendering and other de-serialization operations might fail.

%WinDir%\Tasks

WSS_ADMIN_WPG

Full Control

%WinDir%\System32\Logfiles\SharePoint

Administrators

WSS_ADMIN_WPG

SYSTEM

WSS_WPG

Network Service (for a domain controller only)

Full Control

Read, Write

Full Control

Read

Read, Write

No

No

No

This directory is used by SharePoint usage logging. If this directory is modified, usage logging will not function correctly.

%WinDir%\System32\Drivers\Etc\HOSTS

WSS_ADMIN_WPG

Read, Write

Installation directory included in Windows SharePoint Services 3.0 that is not included in Office SharePoint Server 2007

The following table lists the installation directory that is included in Windows SharePoint Services 3.0, but which is not included in Office SharePoint Server 2007.

Installation directory User Permission Description

<installation drive>\%COMMONPROGRAMFILES%\Microsoft Shared\Web Server Extensions\12\Data

Users

Administrators

SYSTEM

WSS_ADMIN_WPG

Read, Execute

Full Control

Full Control

Full Control

Yes

See Also

Other Resources

Files and Permissions (Windows SharePoint Services 2.0)
Files and permissions for Windows SharePoint Services 3.0