• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Permissions - [Move Domain]

bd7

New Pleskian
Server operating system version
Windows Server 2019 Standard
Plesk version and microupdate number
Obsidian 18.0.44 update 3
When using the [Move Domain] capability on a subscription, the new subscription that is a clone of the old/test site doesn't have proper custom permissions assigned.
It appears to bypass the C:\Program Files (x86)\Plesk\etc\DiskSecurity\custom.xml file

Additionally, when using Plesk Repair tool command: plesk repair --directory-permissions -directory <the_path>
It fails to apply the custom permissions on the root folder, or any subfolder.

The custom permissions only seem to work when creating a new site from scratch. No other time are the rules applied.


Rules example:
Code:
<?xml version="1.0" encoding="utf-8" ?>
<Entries>
<!-- https://docs.plesk.com/en-US/obsidian/advanced-administration-guide-win/changing-security-settings-for-file-system-objects-and-accounts/administering-windows-objects-security-on-pleskmanaged-server/customizing-object-security-settings-in-plesk/customizing-disk-security.49498/ -->

    <!-- plesk upgrade: https://support.plesk.com/hc/en-us/articles/213914325 -->
    <Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />
   
    <!-- https://support.plesk.com/hc/en-us/articles/213914325 -->
    <Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />


<!-- Give local admin users on the server RDP itself access to the website's folder -->
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x144" />
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="Servers" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="default" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
   
</Entries>
 
Back
Top