How to use Windows permissions to restrict access to the MDaemon user directory

This guide will show you how to edit Permissions on the \MDaemon\Users folder. This would prevent unauthorized users from viewing potentially sensitive emails that reside on the server.

Follow these steps to install and run MDaemon as a SYSTEM service.

1. Start MDaemon
2. Select Setup
3. Select Preferences
4. Select Windows Service
5. Verify Logon Name, Password, and Domain are blank.
   • This indicates MDaemon is not running under a particular account.
6. Click the Install Service
   • If the button states Remove Service, the MDaemon service has already been installed.
7. Click OK
8. Click OK again (MDaemon will then be restarted if changes are made)

Verify the MDaemon service is active and not running under a specified account.

1. Select the Windows Start button.
2. Select Run or use Windows Search.
3. Enter services.msc
4. Find the MDaemon service.
5. Verify the Status of the MDaemon service is Running.
6. Right click the MDaemon service.
7. Select Properties
8. Select the Log On tab.
9. Verify the Local System account is selected.
10. Click OK

Follow these steps to modify Windows permissions to restrict access to the MDaemon user directory.

1. Open Windows Explorer
2. Navigate to the MDaemon directory
3. Right click on the Users folder
4. Select Properties
5. Select the Security tab
6. Listed here should be 4 Groups/Users
   • Administrators
   • CREATOR OWNER
   • SYSTEM
   • Users
7. Select Edit (Windows 7/8/2008/2012 OS only)
8. Select Users
9. Click the Deny in the Full-Control check-box
10. Select Add...
11. Enter the account that will be interacting with MDaemon.
12. Click OK
13. Select the account that was just added.
14. Click Deny in the Full Control checkbox.
15. Click OK
16. Click OK (Windows 7/8/2008/2012 OS only)