# Windows Accounts Used by Plesk to Manage Hosted Windows Objects

Plesk administers the server on which it is installed by using a number of Windows user accounts. The user accounts are used by Plesk or remote users logging in to the Plesk-managed server. The following table lists several Windows user accounts and groups that are used by Plesk or remote users to access and manage website content. The default permissions on the main subscription folder are also described for each account.

Account | Description | Default permissions for the subscription folder
--- | --- | ---
ftp_subaccounts | A Windows user group. Additional FTP user accounts created on domains or subdomains are assigned membership in this user group. | No access permissions.
Plesk domain user | A Windows user account. It is created for domain content management purposes at the time of domain creation. For each domain, a separate Plesk domain user account is created. Remote users can access domain content by logging in to the server by using the FTP user credentials. The account is also used by Plesk to manage hosted domain content. | FileNonRemovable for this object and Full Control for subfolders and files.
Plesk IIS user | A Windows user account. It is used for serving incoming HTTP requests. The account is automatically created during domain creation. For each domain a separate account is created. For security reasons, the user account should not be granted full access rights. | Read for files, Read & Execute for folders.
<IIS Application Pool user> | A Windows user account created specifically to use IIS Application Pool. The use of separate user accounts corresponding to dedicated IIS Application Pools ensures the maximum degree of domain isolation. For each domain a separate account can be created. For security reasons, the user account should not be granted full access rights. | Read for files, Read & Execute for folders.