Administering Windows Objects Security on Panel-managed Server

The initial security configuration of all disks on a Panel-managed server is performed during Panel installation. Panel applies its own security settings to all existing Windows objects on the server according to the disk and hosting security policies.

Once security has been configured, you have several options to manage security settings for Windows objects. We recommend that you use Panel's security metadata files to set and edit security settings for Windows objects on Panel-managed servers. The changes made in the files can be then applied to Windows objects by running the ApplySecurity.exe and HostingSecurity.exe command-line utilities.

You can also modify the security settings for each object individually either through Panel GUI or Windows Explorer directly by going to Security tab in the object's Properties. However, neither of these options is recommended. The main reason is that the changes made in the security settings by using these options may be overwritten by security settings applied by ApplySecurity.exe, HostingSecurity.exe, or Reconfigurator.exe command-line utilities.

The following advantages are afforded by using the security metadata files to configure security settings for Windows objects:

• The ability to apply security rules to multiple objects at once.
• Easy track of security settings changes.
• Easy portability of customized security settings between domains and servers.

Please send us your feedback on this help page.