Configuring Fax Security

Applies To: Windows Server 2008 R2

After you install the Fax Server role, the Fax service runs using the Network Service account.

During setup, the following folders are created at <systemdrive>\ProgramData\Microsoft\Windows NT\MSFax:

• ActivityLog

• Common Coverpages

• Inbox

• Queue

• SentItems

• VirtualInbox

You can use the Properties dialog box of the folder to restrict access to or to restrict permissions for these folders, and you can transfer ownership of the folders or objects. You can also change the location for these folders as long as the permissions for the folders in the new location are the same as the permissions in the default location—full security permissions for the local Administrators account and the Network Service account are needed.

In addition, you can use Fax Service Manager to configure permissions for users who you have you have given access to the fax server, and you can enable and configure security auditing.

• Set Permissions for Fax Users and Groups

• Configure Security Auditing

Additional considerations

• To configure fax components, you must be a member of the Administrators group or you must have been delegated the appropriate authority.

• To open Fax Service Manager, click Start, point to Administrative Tools, and then click Fax Service Manager.

Additional references

• Fax Service Manager

• Installing Fax Components