Novell Doc: GroupWise 8 Administration Guide

81.2 File System Rights

Listed below are the locations you need to consider when assigning file system rights to GroupWise users:

Domain Directory: Users do not require file system access to the domain directory.
Post Office Directory: The recommended post office access mode for the GroupWise client is client/server (TCP/IP), which means that the user does not require file system access to the post office. Therefore, ConsoleOne does not assign any file system rights when you add a user to a post office.

If you want to use direct access mode (mapped drive or UNC path), you need to manually assign users the required file system rights to their post office directories. For instructions, see Section 81.2.1, Granting File System Rights to the Post Office Directory.
GroupWise Software Distribution Directory: If you want users to have file system rights to a GroupWise software distribution directory to install or run the GroupWise client, you need to manually assign rights. For instructions, see Section 81.2.2, Granting File System Rights to the Software Distribution Directory.
Mailbox Backup Directory: For users to restore their mailbox from a network backup directory, they need the appropriate file system rights to the directory. For more information, see Section 81.2.3, Granting File System Rights to the Mailbox Backup Directory.

81.2.1 Granting File System Rights to the Post Office Directory

The following information applies only to users who are running the GroupWise client in direct access mode. Users who are running in client/server access mode do not require rights to the post office directories.

To increase security in your post office directories, you should restrict rights as shown in the following table.

Table 81-2 Post Office Directory Rights

Directories	NetWare Rights	Windows Permissions
post office	RWC--F	Change
agents	------	No Access
nlm	------	No Access
language	------	No Access
nt	------	No Access
language	------	No Access
gwdms	RW---F	Change
libx	RW---F	Change
index	RW---F	Change
archive	RW---F	Change
arxx	RW---F	Change
docs	RWCEMF	Full Control
fdx	RWCEMF	Full Control
offiles	R----F	Change
fdx	RWCEMF	Full Control
ofmsg	RWCEMF	Full Control
ofuser	RWCEMF	Full Control
index	RW---F	Change
ofviews	------	No Access
win	R----F	Read
ofwork	R----F	Read
ofdirect	RWCEMF	Full Control
wpcsin	RWCEMF	Full Control
0-7	-WC-M-	Change
problem	-WC-M-	Change
wpcsout	------	No Access
ads	------	No Access
0-7	------	No Access
chk	RWCEMF	Full Control
0-3	-WC-M-	Change
defer	-WC-M-	Change
ofs	RWC-MF	Full Control
0-7	RWC-MF	Full Control
problem	-WC-M-	Change

81.2.2 Granting File System Rights to the Software Distribution Directory

The software distribution directory contains the GroupWise client for Windows. To set up and run the GroupWise client, users require the directory rights listed in the table below.

Table 81-3 Software Distribution Directory Rights

Directories	NetWare Rights	Windows Permissions
software distribution directory	R----F	Read
admin	------	No Access
agents	------	No Access
client	R----F	Read
ofviews	R----F	Read
win32	R----F	Read
internet	------	No Access
domain	------	No Access
po	------	No Access

IMPORTANT:Users require rights only to the client directory and subdirectories. The other directories (admin, agents, domain, internet, and po) are administration directories that users should not have access to.

81.2.3 Granting File System Rights to the Mailbox Backup Directory

If you back up a user’s network mailbox, or a user backs up his or her local mailbox, to a network location, the user requires Read and Write file system rights to the backup directory in order to restore his or her mailbox.