Files and permissions for Office SharePoint Server 2007
Applies To: Office SharePoint Server 2007
This Office product will reach end of support on October 10, 2017. To stay supported, you will need to upgrade. For more information, see , Resources to help you upgrade your Office 2007 servers and clients.
Topic Last Modified: 2015-03-09
In this article:
Installation directory
Web site content area
Windows directory
Installation directory included in Windows SharePoint Services 3.0 that is not included in Office SharePoint Server 2007
This article lists the detailed minimum file permission settings for folders and files created when you install Microsoft Office SharePoint Server 2007. These minimum file permission settings must be in place for Windows SharePoint Services 3.0 to perform as designed.
Installation directory
The following table lists the files and folders in the installation directory for Windows SharePoint Services 3.0. By default, the installation directory is located at the <installation drive>\%COMMONPROGRAMFILES%\Microsoft Shared\Web Server Extensions\12.
| Installation directory | User | Permission | Inherit | Description |
|---|---|---|---|---|
\ADMISAPI |
Users Administrators SYSTEM WSS_WPG WSS_ADMIN_WPG |
Read, Execute Full Control Full Control Read Full Control |
Yes Yes Yes Yes |
Contains the soap services for the SharePoint Central Administration Web site. If this directory is altered, remote site creation and other methods exposed in the service will not function correctly. |
\BIN |
Users Administrators SYSTEM |
Read, Execute Full Control Full Control |
||
\CONFIG |
Users Administrators SYSTEM WSS_WPG WSS_ADMIN_WPG |
Read, Execute Full Control Full Control Read Full Control |
Yes Yes Yes Yes |
Contains files used to extend Internet Information Services (IIS) Web sites to use SharePoint Products and Technologies. If this directory or its contents are altered, Web application provisioning will not function correctly. |
\HCCab |
Users Administrators SYSTEM |
Read, Execute Full Control Full Control |
||
\Help |
Users Administrators SYSTEM |
Read, Execute Full Control Full Control |
||
\ISAPI |
Users Administrators SYSTEM |
Read, Execute Full Control Full Control |
||
\LOGS |
Users Administrators SYSTEM WSS_WPG WSS_ADMIN_WPG <All SharePoint Service Accounts> LOCAL SERVICE |
Read, Execute Full Control Full Control Modify Full Control Modify Modify |
No No No No No No No |
Contains setup and run-time tracing logs. If the directory is altered, diagnostic logging will not function correctly. |
\Resources |
Users Administrators SYSTEM |
Read, Execute Full Control Full Control |
||
\TEMPLATE |
Users Administrators SYSTEM |
Read, Execute Full Control Full Control |
The following table lists the folders for which Windows SharePoint Services 3.0 changes permissions in the Documents and Settings folder of the installation drive (%AllUsersProfile%\Application Data\Microsoft\SharePoint).
| Installation directory | User | Permission | Inherit | Description |
|---|---|---|---|---|
%AllUsersProfile%\Application Data\Microsoft\SharePoint |
Administrators SYSTEM WSS_WPG WSS_ADMIN_WPG |
Full Control Full Control Read Full Control |
No No No No |
Contains the file system-backed cache of the farm configuration. Processes might fail to start, and the administrative actions might fail if this directory is altered or deleted. |
The following table lists the folders for which Office SharePoint Server 2007 changes permissions in the Program Files folder of the installation drive (%Program Files%\Microsoft Office Servers\12.0).
| Installation directory | User | Permission | Inherit | Description |
|---|---|---|---|---|
%ProgramFiles%\Microsoft Office Servers\12 |
WSS_WPG WSS_ADMIN_WPG |
Read, Execute Read, Execute |
No No |
Installation location for the Office SharePoint Server 2007 binaries and data. It can be changed at the time of installation. All Office SharePoint Server 2007 features will fail if this directory is removed, moved after the installation, or altered. |
%ProgramFiles%\Microsoft Office Servers\12\Bin |
Users LocalService |
Read, Execute Read, Execute |
No No |
Installation directory for core SharePoint files. If this access control list is modified, feature activation, solution deployment, and other features will not function correctly. |
%ProgramFiles%\Microsoft Office Servers %ProgramFiles%\Microsoft Office Servers\WebServices |
WSS_WPG WSS_ADMIN_WPG |
Read Read, Write |
No No |
Root directory where back-end Shared Services Provider (SSP) Web services are hosted, such as Excel and Search. Office SharePoint Server 2007 features that depend on these services will not work if this directory is removed or altered. |
%ProgramFiles%\Microsoft Office Servers\WebServices\Root |
Users |
Read, Execute |
No |
Root directory where back-end Root Web services are hosted. The only service currently installed there is a search administration service. Some of the search administration functionality will not work if this directory is removed or altered, including search SSP provisioning. |
%ProgramFiles%\Microsoft Office Servers\Logs |
Users Administrators WSS_WPG WSS_ADMIN_WPG |
Read, Write, Execute Full Control Read, Write Full Control |
Yes Yes Yes |
Location where the run-time diagnostic logging is generated. Logging functionality will not function properly if this directory is removed or altered. |
%ProgramFiles%\Microsoft Office Servers\Data |
Users Administrators SYSTEM WSS_ADMIN_WPG |
Read, Execute Full Control Full Control Full Control |
No |
Root location where local data is stored. The main data stored here are the search indexes. Search functionality stops working if this directory is removed or altered. WSS_ADMIN_WPG permissions are required for search to save and secure data in this folder. |
%ProgramFiles%\Microsoft Office Servers\Data\Office Server |
WSS_ADMIN_WPG |
Full Control |
Yes |
Root location where local data is stored. Search indexes are stored here. Search functionality stops working if this directory is removed or altered. WSS_ADMIN_WPG permissions are required for search to save and secure data in this folder. |
Web site content area
The following table lists the files and folders in the Web site content area. The Web site content area is located at <installation drive>\Inetpub\wwwroot.
| Web site content area | User | Permission | Inherit | Description |
|---|---|---|---|---|
\Inetpub Note All directories enclosing the content root will grant LIST permissions to these accounts. |
||||
\Inetpub\wwwroot\_vti_pvt |
Users Administrators SYSTEM IIS_WPG Internet Guest Account (IUSR_*) |
Read, Execute Full Control Full Control Read, Execute Special Permissions |
||
\Inetpub\wwwroot\wss |
Administrators SYSTEM WSS_WPG WSS_ADMIN_WPG |
Full Control Full Control Read, Execute Full Control |
No No No |
This directory (or the corresponding directory under the Inetpub root on the server) is used as the default location for IIS Web sites. SharePoint sites will be unavailable and administrative actions might fail if this directory is altered or deleted unless custom IIS Web site paths are provided for all IIS Web sites extended with SharePoint. |
Web.config |
Users Administrators SYSTEM IIS_WPG Internet Guest Account (IUSR_*) |
Read, Execute Full Control Full Control Read, Execute, Special Permissions Special Permissions |
||
wpresources\web.config |
Users Administrators SYSTEM IIS_WPG Internet Guest Account (IUSR_*) |
Read, Execute Full Control Full Control Read, Execute, Special Permissions Special Permissions |
Windows directory
The following table lists the files and folders for which Windows SharePoint Services 3.0 changes permissions in the Windows directory (%WinDir%).
| Windows directory | User | Permission | Inherit | Description |
|---|---|---|---|---|
%temp% |
Administrators WSS_ADMIN_WPG SYSTEM WSS_WPG Network Service (for a domain controller only) |
Full Control Full Control Full Control Read Read, Write |
Yes Yes Yes |
This directory is used by platform components on which SharePoint depends. If this access control list is modified, Web Part rendering and other de-serialization operations might fail. |
%WinDir%\Tasks |
WSS_ADMIN_WPG |
Full Control |
||
%WinDir%\System32\Logfiles\SharePoint |
Administrators WSS_ADMIN_WPG SYSTEM WSS_WPG Network Service (for a domain controller only) |
Full Control Read, Write Full Control Read Read, Write |
No No No |
This directory is used by SharePoint usage logging. If this directory is modified, usage logging will not function correctly. |
%WinDir%\System32\Drivers\Etc\HOSTS |
WSS_ADMIN_WPG |
Read, Write |
Installation directory included in Windows SharePoint Services 3.0 that is not included in Office SharePoint Server 2007
The following table lists the installation directory that is included in Windows SharePoint Services 3.0, but which is not included in Office SharePoint Server 2007.
| Installation directory | User | Permission | Description | |
|---|---|---|---|---|
<installation drive>\%COMMONPROGRAMFILES%\Microsoft Shared\Web Server Extensions\12\Data |
Users Administrators SYSTEM WSS_ADMIN_WPG |
Read, Execute Full Control Full Control Full Control |
Yes |
See Also
Other Resources
Files and Permissions (Windows SharePoint Services 2.0)
Files and permissions for Windows SharePoint Services 3.0