System information

Adobe documentation - Confidential
Folder
Principal
Permission
{cf.root}/config/wsconfig/
IUSR, iisuser
Read & execute
List folder contents
Read
{cf.root}/config/wsconfig/n/isapi_redirect.log
iisuser
Read
Write
{cf.root}/config/wsproxy/
IUSR, iisuser
Read & execute
List folder contents
Read
{cf.instance.root}/wwwroot/CFIDE
IUSR, iisuser
Read & execute
List folder contents
Read
The ColdFusion IIS connector writes logs to a file called isapi_redirect.log - the IIS Application Pool user
(iisuser in our example) needs write permission to this file. You may consider changing the location of
this file, which is defined in the isapi_redirect.properties file to a non default directory.
Note: if you choose to run Anonymous Authentication through the Application Pool user then IUSR does
not need permission to these files.
Note: if you are setting up multiple instances of ColdFusion or multiple connectors you will need to
repeat this step for each connector. Each connector instance is placed in a subdirectory of
{cf.root}/config/wsconfig/n/ where n is a number (starting with 1 by default).
The {cf.root}/config/wsproxy/ is used for the WebSocket proxy, you may need to create an empty
wsproxy directory here as well if you plan on using WebSockets. The directory is populated similar to the
wsconfig directory when the wsproxyconfig.exe is run later in this guide.
Registry Permissions
Next open regedit.exe and navigate to the registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ and locate each key matching a
Adobe documentation - Confidential