separate user group for iwpd users
For plesk on windows
It would be helpful if plesk created a separate user group for all IWPD users.
That would allow me to set specific security settings to that group.
See this kb article as an example: https://www.plesk.com/kb/support/access-to-cmd-exe-and-powershell-exe-how-to-allow-it-to-subscription-users-and-deny-to-iis-users-on-a-plesk-server/
Because the IWPD user and account user are in the same psacln group we cannot use that group to block cmd or powershell access (since the domain account apparently needs to be able to run those commands).
The workaround revolves around manually creating a new security group and manually adding those users to the new group, the obvious problem with that approach is that it will be out of date as soon as a new subscription is added. (Edit: I see that the kb document guides on how to create a bat file to update regularly)
If plesk put the IWPD users in a separate group, we would be able to set the required permissions as desired.
mn
shared this idea
Thank you for your input! We will consider this functionality in upcoming releases if it becomes popular.
Everyone, please continue voting for this feature if you consider it important.
-- SH
-
mn
commented
Once plesk creates this separate group. it would be great if we can block access to cmd.exe and powershell to that group in plesk instead of requiring to RDP and set permissions.