Installation and Upgrade > Installation and Configuration Guide > Advanced Configurations > Configuring IIS and Embedded Servlet Engine > Configuring IIS and Windchill > Enabling the Default Domain and Realm for IIS > Giving IIS Users Appropriate Permissions
  
Giving IIS Users Appropriate Permissions
The IIS user must have at least read permissions to the following files:
• <Windchill>/tomcat/connectors/conf/workers.properties
• <Windchill>/tomcat/connectors/conf/uriworkermap.properties
The IIS user must have write permissions to the following directory and its contents:
• <Windchill>/tomcat/connectors/logs
* 
Permission may need to be re-applied after xconfmanager propagation, or after patches have been installed.