Cacti (home)ForumsDocumentation

Configure Security

As user accounts have changed between Windows versions, the table below provides a reference for the common names used.

Alias Username/Group Description
TaskUser Domain\Usename User account that runs the scheduled task for Cacti.
IIS_USER IUSR_COMPUTERNAME Internet Guest Account (Windows NT/2000/XP/2003)
IIS_USER IUSR Internet Guest Account (Windows Vista/2008/7)
IIS_SERVICE IIS_WPG IIS Service Account (Windows 2003)
IIS_SERVICE IIS_USRS IIS Service Account (Windows Vista/2008/7)


The default paths below are the recommend as Cacti 0.8.x doesn't handle paths with spaces very well (even when using 8.3 file naming). The permissions are generalized and are by no means the most restrictive. Each system administrator should evaluate the security implementation and adjust accordingly.

Path User NTFS Permissions
C:\Spine\ TaskUser Read & Execute
C:\Cygwin\bin\ TaskUser Read & Execute
C:\Inetpub\wwwroot\cacti\ TaskUser Read & Execute
IIS_USER Read & Execute
C:\Inetpub\wwwroot\cacti\rra\ IIS_SERVICE Modify
IIS_USER Modify
TaskUser Modify
C:\Inetpub\wwwroot\cacti\log\ IIS_SERVICE Modify
IIS_USER Modify
TaskUser Modify
C:\PHP\ IIS_USER Read & Execute
TaskUser Read & Execute
C:\PHP\sessiondata\ IIS_USER Modify (Files only)
C:\PHP\uploadtemp\ IIS_USER Modify (Files only)
C:\Net-SNMP\ IIS_USER Read & Execute
C:\RRDTool\ IIS_USER Read & Execute
TaskUser Read & Execute
C:\Windows\System32\cmd.exe IIS_USER Read & Execute
IIS_SERVICE Read & Execute
TaskUser Read & Execute





Personal Tools