See Sage 100 ERP Install Guide Security and Permissions for detailed information (Installation and System Administrator's Guide)

Notes:

• This entry does not apply to Sage 100 Premium ERP because the ODBC DSN connects to the SQL server rather than the Sage 100 ERP Advanced server.
• Because share permissions on FAT volumes are not as restrictive as NTFS permissions, network security can be compromised. Sage 100 ERP Advanced can copy (but not delete) files to other locations using Windows Explorer, Network Neighborhood, DOS prompt, and so forth.
• Within Sage 100 ERP ADV, all users inherit the rights of the account running Application Server (Host.exe in version x3.xx). They must be granted individual rights to perform actions that access the ..\Mas90 folder, such as printing Crystal reports.

The following represents the minimum rights and permissions required to run Sage 100 Advanced. Additional rights can be granted if desired.

• In Windows, create a user account (for example, 100ERP) to run Sage 100 Advanced as a stand-alone application or as a service.
  • This user account should be added to the local Administrators Group on the server running Sage 100 Advanced.
  • If the user account is not added to the Administrators Group, grant at least the following rights to the user account:
    • NTFS volumes:
      • ..\Mas90\ and subfolders:
        • NTFS folder permissions = Full Control
        • NTFS file permissions = Full Control
      • The parent folder of ..\Mas90 (for example ..\Apps\Mas90):
        • NTFS folder permissions = LIST (RX)
      • ..\Windows subfolders:
        • NTFS folder permissions = LIST(RX)
        • NTFS file permissions = READ (RW)
      • FAT volumes:
        • Change permissions at the parent folder

• For ODBC or third-party applications (for example, Crystal Reports, FRx) give network access to individual users or groups.
  • Share the parent folder of ..\Mas90 (for example, with C:\Apps\Mas90\, share either the C: drive or the ..\Apps folder. Do not share ..\Mas90\ itself).
  • Grant Change permissions at the parent folder to the users or groups that use the third-party application.
  • NTFS volumes: Grant the following NTFS special access permissions for folders and files at the ..\Mas90\ folder and below:
    Note: NTFS permissions are more restrictive than share permissions and override any share permissions.
    • Special Folder Access permissions = Read and Execute
    • Special File Access permissions = Read, Write, and Execute. The combined permissions are therefore (RW)(RWX).
    • For the NTFS permissions, there should be an Administrator with Full Control access to Folders, Files, and other Sage 100 ERP ADV related resources