Skip to content

HTTP and HTTPS Configuration#

In case that DACL (Discretionary Access Control Lists) is enabled in the application servers, for each application server, it is necessary to reserve namespace rights for a portion of the HTTP URL namespace to a particular group of users. The DACL can be specified by using an account name with listen and delegate parameters or by using a security descriptor definition language (SDDL) string.

For each application server to reserve the host address, it is necessary to follow the sequence:

  • Run cmd as Administrator.

  • Type netsh http add urlacl url=http://+:[port]/[MyUri] user=[DOMAIN\user] (replacing [port], [MyUri] and [DOMAIN\user] with the correct values) as seen in the example below:

  • Add permissions to every user: netsh http add urlacl url=http://+:8011/ user=everyone

  • Add permissions to the particular user that is running the Critical Manufacturing service: netsh http add urlacl url=http://+:8011/ user=mydomain\myuser

Please refer to the following article for more information: Configuring HTTP and HTTPS ⧉.