• The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue Permissions - [Move Domain]

bd7

New Pleskian
Server operating system version
Windows Server 2019 Standard
Plesk version and microupdate number
Obsidian 18.0.44 update 3
When using the [Move Domain] capability on a subscription, the new subscription that is a clone of the old/test site doesn't have proper custom permissions assigned.
It appears to bypass the C:\Program Files (x86)\Plesk\etc\DiskSecurity\custom.xml file

Additionally, when using Plesk Repair tool command: plesk repair --directory-permissions -directory <the_path>
It fails to apply the custom permissions on the root folder, or any subfolder.

The custom permissions only seem to work when creating a new site from scratch. No other time are the rules applied.


Rules example:
Code:
<?xml version="1.0" encoding="utf-8" ?>
<Entries>
<!-- https://docs.plesk.com/en-US/obsidian/advanced-administration-guide-win/changing-security-settings-for-file-system-objects-and-accounts/administering-windows-objects-security-on-pleskmanaged-server/customizing-object-security-settings-in-plesk/customizing-disk-security.49498/ -->

    <!-- plesk upgrade: https://support.plesk.com/hc/en-us/articles/213914325 -->
    <Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />
   
    <!-- https://support.plesk.com/hc/en-us/articles/213914325 -->
    <Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />


<!-- Give local admin users on the server RDP itself access to the website's folder -->
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x144" />
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="Servers" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="default" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
   
</Entries>
 
Back
Top