Article ID: 8181, created on Mar 11, 2010, last review on May 11, 2014

  • Applies to:
  • Operations Automation 2.9


The user 'pem_domain' is used by POA in two places only - IIS FTP service and AWStats service. In both cases this user is required for "FTP User Isolation" and used for read-only access to Active Directory by FTP service.

Use the following procedure to change password of the user 'pem_domain':

1) Change password of the user in Active Directory

2) On each POA-managed Windows shared webserver with IIS service do the following:

2.1) Change password of the user in IIS:

a) for IIS6:

Using the script 'adsutil.vbs' (usually located in C:\Inetpub\AdminScripts):
- find FTP site "PEM FTP Server for Shared Hosting"
cscript adsutil.vbs enum MSFTPSVC

The script will return list of FTP services like in the example below:
C:\Inetpub\AdminScripts>cscript adsutil.vbs enum MSFTPSVC
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.

KeyType                         : (STRING) "IIsFtpService"
MaxConnections                  : (INTEGER) 100000
AnonymousUserName               : (STRING) "IUSR_WSSFE"
AnonymousUserPass               : (STRING) "**********"

We are interested in site IDs in the end of output, in this example they are 1 and 145.

- for each ID in the output above run the script 'adsutil.vbs' again:
cscript adsutil.vbs enum MSFTPSVC/${id}

Replace ${id} in the command above with real ID of site.

- find ID of the site in the output named as "PEM FTP Server for Shared Hosting" and run the following script using found ID of service:
cscript adsutil.vbs set MSFTPSVC/${id}/ADConnectionsPassword <pass>

Replace <pass> in all commands in this article with new password of the user 'pem_domain' which you set in AD on the step 1.

b) for IIS7:

Use Internet Information Services Manager:
- select site "PEM FTP Server for Shared Hosting"
- open feature "FTP User Isolation"
- click "Set..." close to "FTP home directory configured in Active Directory"
- enter username (with domain), e.g. DOMAIN\pem_domain
- enter new password twice

2.2) Restart FTP site "PEM FTP Server for Shared Hosting" using IIS Manager

3) On each server with AWStats - perform the same actions as for server with IIS, but for the FTP site named as "PEM Internal FTP Server".

4) In POA system database 'plesk' update package properties (they are actually used only during deployment, so this step is only for maintaining database consistency):

BEGIN; UPDATE property_values SET value='<pass>' WHERE value_id IN (SELECT DISTINCT value_id FROM v_props WHERE name='windows.domain.user.password');

37e602325b9e080e0d137546b764143c 5356b422f65bdad1c3e9edca5d74a1ae 80fcf07a72a3fc2739554dff85ce8fe7 caea8340e2d186a540518d08602aa065 e12cea1d47a3125d335d68e6d4e15e07

Email subscription for changes to this article
Save as PDF