Installation and Upgrade Guides › Web Agent Installation Guide for IIS › Configure a SiteMinder Agent for IIS or Web Agent on an IIS Web Server › How to Configure a SiteMinder Agent for IIS Manually › Grant Access to Agent for IIS Files and Folders with cacls.exe

Grant Access to Agent for IIS Files and Folders with cacls.exe

The final step for configuring a SiteMinder Agent for IIS manually is granting permissions to the SiteMinder files and folders on your IIS 7.x web server. The cacls command (provided by Microsoft) provides a possible example of how to set these permissions manually.

Important! CA provides this information only as an example of one possible method of configuring SiteMinder without using the programs and utilities tested and approved by CA. Microsoft provides the cacls.exe command as part of the Windows operating environment. You may choose to use the following examples as a guide to grant file permissions for SiteMinder Web Agent for IIS. This command and the syntax shown are subject to change by Microsoft at any time and without notice. For more information, go to the Microsoft Support website, and search for "cacls".

This procedure describes an example of granting the SiteMinder Agent for IIS permissions to certain access files and folders on an IIS 7.x web server. Perform this procedure for all manual configurations, regardless of the pipeline mode used by your application pools.

To grant access to Agent for IIS files and folders with cacls.exe

1. Open a Command Prompt window on your IIS web server.

   Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges.

2. Grant permissions to the SmHost.conf file with the following command:

   cacls"web_agent_home\config\SmHost.conf" /T /E /G "NetworkService":C
   

3. Grant permissions to the log file with the following command:

   cacls"web_agent_home\log" /T /E /G "NetworkService":C
   

4. Grant permissions to the WebAgent.conf file with the following command:

   cacls"C:\Program Files\CA\webagent\bin\IIS\WebAgent.conf" /T /E /G "NetworkService":R
   

   Access to the Web Agent files and folders is granted.