Resource	PDS Admin	PDS Service	PDS Service	PDS FileSync
	Runs as local IUSR_Computer account	On Windows 2000 Runs as local ASPNET account	On Windows 2003 Runs as local “Network Service” account	Runs as SYSTEM (local system account)
PDS Admin: C:\Program Files\Calyx Software\Point Data Server\admin\*.* + subdirectories
	Read & Execute
PDS Service: C:\Program Files\Calyx Software\Point Data Server\service\*.* + subdirectories
		Read & Execute	Read & Execute
PDS FileSync: C:\Program Files\Calyx Software\Point Data Server\filesync\*.* + “db” directory
				Read & Execute
Root Folder Path: C:\Program Files\Calyx Software\Point Data Server\filesync\DataFolders\*.* + Subdirs
	R+W at Root	Read	Read	Full Control
Temporary Path: C:\Program Files\Calyx Software\Point Data Server\filesync\TempLoanFiles\*.* + Subdirs
		Full Control	Full Control	Full Control
Custom Fields Path: C:\Program Files\Calyx Software\Point Data Server\filesync\CustomFields\*.CSF
		Full Control	Full Control	Full Control
WINPAPI.INI file in Windows Path: C:\Windows\WINPAPI.INI
	Read			Read
.Net Path: C:\Windows\Microsoft.NET\Framework\v1.1.4322\
	Read	Read	Read	Read
ASP.Net Temporary Path: C:\Windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files
	Full Control	Full Control	Full Control
Windows Temporary Path: C:\Windows\Temp
	Full Control	Full Control	Full Control	Full Control

Notes:

• Paths might be different in your environment; apply the permissions accordingly.
• I listed the default accounts that are used by the PDS components when running code (e.g. PDS Admin runs as “IUSR_Computername”, PDS FileSync runs as the local system account “SYSTEM”, etc…).  These accounts may have changed, so you’ll need to give the right permissions to the right accounts (see below for instructions on how to determine which account is used by which PDS component).
• NTFS permissions are changed by running File Explorer, right-clicking on the relevant directory or file and choosing Properties, then choosing the "Security" tab.

Here’s how to determine which accounts are being used by which PDS components:

The PDS Service is an ASP.Net web service, and it will run under different credentials depending on how your system is setup.  The first thing to do is to establish which credentials it's really running under.  On the machine where the PDS Service is running:

1) In notepad, open up the file Web.Config in the PDS Service directory (typically C:\Program Files\Calyx Software\Point Data Server\PDSService).

2) Look for the line <identity impersonate="true"/>

3) If you found the line above: PDS Service is running as the user defined in IIS.  This is typically IUSR_Computername, but you should double check it by running the IIS Manager > Right click on the "service" virtual directory > Properties > Directory Security tab > Authentication and access control / Edit > Verify that "Enable anynymous access" is checked - check the User name (typically IUSR_Computername).

4) If you didn't find the "impersonate" line from step 2: the PDS Service is running under the default ASP.Net account:

•  In Windows 2000 this is the "ASPNET" account.
•  In Windows 2003 this is the "Network Service" account.

Once you know which account PDS Service is running under, make sure this account has the correct NTFS permissions on the resources listed above.

Do the same for the PDS Admin site. 

For the PDS FileSync windows service you can check under Control Panel > Administrative Tools > Services > CalyxPDSFileSync > Log on as (it should be “Local System Account” which appears as “SYSTEM” in the NTFS dialogs).

On a separate note I added the following permission today: "read" on the file C:\Windows\WINPAPI.INI