| AJS 4.x
Manual | Note! This Manual is for the "Windows authentication" version, which is designed to work with existing Windows server or Active Directory accounts and Windows authentication. If you want to create accounts by yourself and store their credentials in your own HTTP Commander XML database, you need to download the "Forms authentication" version! This Manual is for the Windows authentication version only! | Web file manager Free Installation assistance Manual Home page

Application settings

Note!
We offer free installation assistance for both trial and commercial licenses. You can get help via email, instant messenger or via remote access to your server. You just need a few minutes to get online help.
All settings of application are stored in one XML file: "HttpCommanderSettings.config" in the root application folder. You can use the Admin Panel->Setting tab (HTCOMNET/Adminpanel.aspx) to change the settings, or you can edit the file manually (not recommended). If you modify the configuration file manually, restart the application to apply changes!

## Settings by groups:

- Authentication type settings
- Two factor authentication settings
- Main settings
- Main settings in web.config file
- Active Directory groups and home folder support parameters
- User interface
- Thumbnails settings
- File upload/download parameters
- MS Office/Openoffice/LibreOffice support, Online Documents viewers and Image editor
- Using MS Office and OpenOffice to work with documents
- Web folders mapping
- Public links
- Mobile UI
- Settings of the Trash
- Advanced parameters (hidden by default)

## Authentication type

Key | Description | Default value
AuthMode | Authentication mode setting. This specifies the type of authentication users have to pass to log into HTTP Commander and the type of back-end account database. There are 6 kinds of authentication: "Windows" authentication should be used if you want to use windows accounts for authentication in HTTP Commander (either local or Active Directory accounts). Account database: SAM database of the web server machine or Active Directory (server must be joined to domain). "Forms" authentication is used if you want to manage accounts by yourself. Account database: custom XML file (Data\Accounts.xml). "Forms for Windows users" authentication relies on the same account database as "Windows" authentication, but, unlike the former, users enter their credentials in a web form. Note! "Forms for Windows users" authentication is less stable than Windows authentication. (We are aware of the following problem: WebDav feature (MS Office edit and folders mapping) does not work in IIS 6 and in IIS 7+ under Classic mode). "Novell EDirectory" authentication works with Novell EDirectory accounts. Account database: Novell EDirectory. When you select this authentication type, then you should specify the following parameters: EDirectoryBindUserDN, EDirectoryBindUserPassword, LDAPContainer in the HttpCommanderSettings.config file. "Shibboleth" should be used if you deployed Shibboleth system to manage access to HTTP Commander application. The file manager relies on Shibboleth system to perform authentication, HTTP Commander determines the current logged in user to decide the type of access to provide to application: what folders to map, whether Admin Panel will be available, and so on. For more info see Shibboleth integration manual. "Auth0" SSO & Token Based Authentication service. For more info see Auth0 integration manual, Auth0 parameters section and Auth0 site. Note! Don't set Forms authentication for Windows accounts and vice-versa. See Manual configuration of authentication mode for instructions about changing authentication mode. Note! This manual is for the Windows version only! If you need Forms authentication version, then at least download its User Manual. "Forms authentication" version download | "Windows"

## Two factor authentication settings

Key | Description | Default value
TwoFactorAuthProvider | Two factor authentication provider selection. Here you can select which provider should be used for 2-factor authentication. Choose None to disable two factor authentication. "None" - disable 2-factor authentication and use regular 1 step authentication process. "Duo" - use DUO security as 2-factor authentication provider. To correctly configure Duo 2-factor authentication you will need to : Sign up for a Duo account. Log in to the Duo Admin Panel and navigate to Applications. Click Protect an Application and locate Web SDK in the applications list. Click Protect this Application to get your integration key, secret key, and API hostname. You will need to put these values into appropriate settings of HTTP Commander: TwoFactorDuoIntegrationKey, TwoFactorDuoSecretKey, TwoFactorDuoAPIHostname, More info on DUO Getting started guide Note! 2-factor authentication setting applied for all users. There is no way to enable it for each user individually. Note 2 ! 2-factor authentication would not be used for WebDav and MSOFBA authentication processes. However WebDav and "Edit in Office" feature will work as it does without 2-factor authentication enabled. Also second step would not be displayed on native android application: user will be authenticated with one step as usual. | "None"
TwoFactorDuoIntegrationKey | Value of Integration key from DUO security application settings. | ""
TwoFactorDuoSecretKey | Value of Secret key from DUO security application settings. | ""
TwoFactorDuoAPIHostname | Value of API Hostname key from DUO security application settings. | ""

## Main settings

Key | Description | Default value
LicenseKey | Put the license key here after purchase. If the key is not set the application will work in a trial mode. The trial mode allows not more than 10 sessions and shows a trial notification when a user logs on. If a user is not active during 60 minutes, the sessions will be ended. To terminate an existing session manually, you need to restart the application. | ""
Administrators | List of administrators' names, comma-separated. Any user can be an administrator if its name is in this list. Administrators can login to the Admin Panel ("adminpanel.aspx" page) and Diagnostics("diagnostics.aspx") functionality of the HTTP Commander. You can also type group by "group:" prefix (Each member of the group is Administrator) | "Administrator,Admin,group:Administrators,group:Domain admins,group:Admins"
ShowDiagnosticsASPXOnlyForAdmins | The key defines if /diagnostics.aspx page is available to all authenticated users or only to administrators (Defined by "administrators" parameter). You can disable the diagnostics page output from users if it shows info that you want to hide. Note! By default it is available for all users! | false
DataFolderPath | Path to the folder with XML users and folders settings. By default, it is stored in the HTCOMNET\Data folder. To prevent file download: You can disable "read" permissions in IIS for this folder. For Windows 2003: Open IIS console: Control panel->Administrative tools-> Internet Information Services->Expand "Default web site" and "HTCOMNET" folder. Right-click the "Data" folder and select "Properties" in the context menu. In the Data properties dialog box, open "Directory" tab and uncheck Read permissions. Screenshot For Windows 2008, 2012, 2016: In the IIS console select Data node inside "HTCOMNET" node and click "Handler mappings" in the right tab. Select StaticFile in the list and click "Edit Feature Permissions" link in the right tab. In the next dialog window, uncheck "Read" permissions. Screenshot or move this folder outside of the web site root. Copy the "Data" folder to a new path, like c:\, and set "c:\Data" value. Check NTFS permissions for new Data folder location. | "~/Data"
LogEvents | Key defines list of events that will be logged. Set empty value to disable logging. See also LogRecordsMaxCount, AllowUsersWatchModifications parameters. | "View,Download,Upload,Create,Modify,Edit,Rename,Delete,Restore,Copy,Move,OfficeLock,OfficeUnLock,CreatePublic,Login,Logout"
CreateRootFoldersIfNotExists | Set true to create root folders automatically if it does not exist. Applied only for paths with %USERNAME%, %LOGONUSER%, %USEREMAIL% or %USERID% patterns. | true
HideFilesWithAttributes | The key defines if files with some attributes will be hidden for users. Example: value="hidden,system,readonly,encrypted" - files and folders with attributes Hidden, System, Read-only or Encrypted are hidden. Security note. | ""
ZipUnzipDefaultCodePage | The key defines default code page for Zip archive. 850 is a code page for English-speaking and most European countries. If the files with names in your language are added to the ZIP with corrupted name, you need to modify this value. You can google for your region's code page. See also ZipUnicodeFileNames parameter. | 850
ZipUnicodeFileNames | The key defines using unicode file names for create Zip archives. See also ZipUnzipDefaultCodePage | true
EnableChangePassword | The key defines if users can change their own password. For AD and Windows users Password security policy could be applied: there are password minimum age, length requirement, etc. If new password does not meet specified requirement, error message will be displayed to user . Take a look at the screenshot below to check Domain Security Policy. Screenshot | true
ErrorsMaxCount | Max size of records for errors file Data\Errors.xml | 100
EmailNotification | Notify about uploaded/modified/downloaded/created/deleted files/folders, public link creation Example: Events: Upload,Modify,Download,Create,Delete,CreatePublic When: OnSessionEnd Emails: mike@mysite.com,jdoe@mysite.com Users: admin,john Groups: students,staff Path: Demo folder 1\ Path: path to folder2\commonproject.doc Path: ^Domain users demo folder\\folder1\\ (type "Regex") Events is a comma-separated list of events, for which notification emails will be sent. Available events: Upload,Modify,Download,Create,Delete,CreatePublic When is a one of the OnSessionEnd or Immediate values, setting when notification emails about actions with files will go. Emails is a comma-separated list of e-mail addresses that will get notification about events with files. Users is a comma-separated list of users to monitor. Groups is a comma-separated list of groups to monitor. The application is monitoring events (upload/modify/download/create/delete) activity of a user if its name is listed in the user list or if a group it is a member of is listed in the groups list. If both users and groups lists are empty, then all users are monitored. Path specify what folders and files to monitor. NOTE: Path should be specified in Http Commander notation, not physical folder/file path. There two types of paths: plain and regex. For plain paths you may specify either file or folder. To distinguish folder path from file path, a folder path should end with a backslash. When you specify file, for example, "share\dir1\file.txt", then monitor only that particular file. When you specify folder, for example, "share\", then monitor all files in that folder and all its subfolders. For regex paths, that path parameter should contain regular expression to match against file path. For example, "^share\\.*\.txt$" matches all file with ".txt extension in "share" folder and all its subfolders. For monitor of all folders you can add a path "^.*$" with Regex type. You may specify Path parameter a number of times. The application monitors a file if it matches at least one of the path filters specified. If you do not specify a path filter, then all files are monitored. Description of the example described above: if the users admin and john or any another user of students and staff groups are uploading (or-and modifying, downloading) files into (from) the Demo folder 1 or a path to folder2\commonproject.doc file or into (from) the folder matching the regular expression "^Domain users demo folder\\folder1\\", the notifications will be sent to the following e-mail addresses: mike@mysite.com and jdoe@mysite.com. You need also to configure Mail Settings parameters and type your mail server, port and user if authentication is needed. |
ApplicationName | Application name for display in various messages (for example, in a email template when sending public links). You can type here your custom value like "ClassFiles". | HTTP Commander
DomainName | Url of the application. In case if HTTP Commander work in your internal network and accessible by your internal domain name, then some of features may not work, because they require access to HttpCommander from internet. Features which require global domain name are: public links, Zoho, Google Drive (documents viewer), Pixlr, Office Web Access (document viewer), ONLYOFFICE, Adobe Creative Cloud Online Image Editor (Aviary). Set absolute url (with global domain name) to HTTP Commander application including path to application folder. Example: "http://www.example.com/HTCOMNET/". Set an empty string (default value) for this parameter if you want to use the current HTTPCommander url (used by users to open HTTP Commander in browser). | ""
ZipLevelCompression | Level of Zip compression (from 0 to 9 inclusively). | 6
ShowControlNavigationFolders | To show (true) or hide (false) buttons (back, forward, resent folders) control of navigation according to folders. | true
EnableAutoLogoutWhenSessionTimedOut | If this parameter is enabled, in case of inactivity during lifetime of session the Default page will redirect to the Logout page. Note 1. Value of session timeout can be changed in the web.config file:
    ...
    <configuration>
        ...
        <system.web>
            ...
            <sessionState timeout="60" />
    ...
By default timeout of session 60 minutes (1 hour). See sessionState timeout parameter. Note 2. Activity of the user is considered execution of ajax-server requests. | false
TemporaryFolder | Temporary folder. It is used to store temporary file, such as thumbnails, intermediary video files created in video conversion process, zip files for download, and other. When the parameter is blank, not valid or folder not exists, the system temporary folder (usually C:\Windows\Temp) is used. Note 1 Be sure to set the NTFS permissions to read and write for application pool account and end-user accounts in Windows version. Note 2 You can also change the path to the temporary ASP.NET files, including temporary folders for standard ASP.NET upload (Standard tab in uploaders window) in Web.config file in system.web section for compilation tag specify tempDirectory attribute with the path to the desired temporary folder. For example:
    <configuration>
    ...
        <system.web>
        ...
            <compilation targetFramework="4.0" tempDirectory="d:\temp\" />
        ...
For more info see Temporary folder description. | ""
SearchMethodOfFiles | A method of searching for files and folders. Available values: Disabled: the ability to search for files, folders is completely disabled; OnlyWindowsSearch: only the Windows Search service used to search files/folders. Note that, in this case, search by Details is not available; NotUseWindowsSearch: use only the standard method (recursive listing subdirectories with a comparison pattern) to search files and fodlers. ; FirstTryWindowsSearchThanStandard (by default): use Windows Search Service firstly, and then if nothing is found, or found less than the expected value, the search is carried out by standard method (recursive listing subdirectories with a comparison pattern). (Search by Details only included when a standard search method used). If you enable the ability to search for files/folders (the value is not equal to Disabled), then on the main page at the top right of the file list will be available quick search fields to search files by name (and, if available, by contents). Also you can add a toolbar button Search (parameter ToolbarButtons1 or ToolbarButtons2; by defualt, Search button is included) to be able to open the search window from toolbar. Note! Windows Search allows you to quickly find files based on their content. To do this, you must install the Windows Search Service feature and add the desired folder in the list of indexed locations (Control Panel → Indexing Options). See Windows Search manual. See also parameters SearchCriterionsOfFiles, MaxSearchResultsPerPage in UI section and hidden parameter EnableWindowsSearchQueryBuilder in Main section. | "FirstTryWindowsSearchThanStandard"

## Main settings in web.config file

Key | Description | Default value
sessionState timeout | Inactive session life timeout. If a user is not active, the session will be ended after specified number of minutes. Also enable (set to "true") EnableAutoLogoutWhenSessionTimedOut parameter. | 60
httpRuntime maxRequestLength | Maximum file size (file upload limit), in Kbytes. By default, it is 2 GB(maximum value). | 2097151
requestLimits maxAllowedContentLength | The key is the same as httpRuntime maxRequestLength but for IIS 7/8 compatibility. The value is in bytes. By default, it is 2 GB (Maximum value). | 2147483648
mailSettings | The mailSettings section defines your SMTP server settings. These settings are used to recover user password, email notifications and "send email" features. This is built-in .NET section. You can read about the settings at MSDN site or see the example below: <smtp deliveryMethod="Network" from="noreply@yoursite.com"> <network host="mail.yoursite.com" port="25" userName="" password="" defaultCredentials="false" /> </smtp> Leave userName and password parameters empty if server does not requires authentication. Note 1! You can enable SSL for email feature. Add enableSsl="true" to <network ../> section. Note 2! You can use external smtp like GMail. Example: <mailSettings> <smtp deliveryMethod="Network" from="example@gmail.com"> <network defaultCredentials="false" host="smtp.gmail.com" password="example" port="587" userName="example" enableSsl="true"/> </smtp> </mailSettings> If you had problems when using smtp.gmail.com server please read information: Allowing less secure apps to access your account. Note 3. Some of these settings can be changed in Admin Panel. |

## Active Directory groups and home folder support parameters

These parameters determine how to read user groups membership and home folder from Active Directory (or Novell eDirectory). The first way is to read data dynamically from Active Directory (AD) i.e. application makes explicit request to AD when user logs on. The second way is to read information from static file (all info stored in XML file). By default application reads data dynamically. You may switch to static file if you have problems with AD. Use ADAccountsFilePath parameter to specify file path (It will work in 100% cases).
Parameters below define dynamical reading info from Active Directory:

Key | Description | Default value
ReadWindowsUsersGroupMembership | This parameter enables using Active Directory to query information about group membership, home folders, and the like. You have to enable this parameter to use %HOME% placeholder in folder paths. Available values: True - allows reading information from Active Directory. Application uses current user identity (logged in user) to connect to Active Directory. False - the groups and home directory info is not read. It makes the application work faster. But if you created folder for group or %HOME% folder then such folders won't be in the list. You can test if the selected method works successfully in Diagnostics in Admin panel("HTCOMNET/Diagnostics.aspx"). You should see the list of logon users' groups. | true
UseUniversalWayToReadGroups | This parameter determines whether to read user's groups from Active Directory or examine security token. When this parameter is false, HTTP Commander sends an LDAP or WinNT request to the specified server, depending on the value of LDAPContainer, to detect which groups the user is a member of. The LDAP provider returns both security and distribution groups from Active Directory. WinNT provider returns only security groups. When UseUniversalWayToReadGroups parameter is set to true, the application uses the access token of the logged in user to detect which groups the user is a member of and does not send any additional requests. This method detects only security groups. The second method works considerably faster than the previous one since no supplementary requests are issued. We recommend you enable this parameter unless you need distribution groups. Note that you still need to assign the LDAPContainer parameter a correct value, to get the list of users, groups, detect users' home folders and so on. | true
LDAPContainer | This parameter specifies how the application should bind to Active Directory or Novell eDirectory to obtain various information about the users. HTTP Commander requests the following information from directory service: list of all users and groups, what groups a user is member of, home folder of a user and so on. Also, HTTP Commander uses the parameter to change user's password. If "UseUniversalWayToReadGroups" parameter is set to true, HTTP Commander uses other method to detect the user's groups, see UseUniversalWayToReadGroups for details. Note! After changing this parameter, run Diagnostics (/diagnostics.aspx) to check if groups and/or home folder are detected correctly. Supported values: "" (Empty string) - The application uses the WinNT provider for local accounts and the LDAP provider for domain accounts. "winnt" - The application uses the WinNT provider. This method does not support nested groups and global groups. "auto" - The application uses the LDAP provider. It uses the default naming context (value of the defaultNamingContext attribute of the root DSE object) as the starting point. If the LDAP search fails, the application falls back to WinNT provider. "ldap" - The application uses the LDAP provider. It uses the domain default-naming context (value of the defaultNamingContext attribute of the root DSE object) as the starting point. "root" - The application uses the LDAP provider. It uses the domain root-naming context (value of the rootDomainNamingContext attribute of the root DSE object) as the starting point. "custom LDAP path" - The application uses the LDAP provider. You can specify the domain name or the Domain Controller name where HTTP Commander will read the information from. Note This is the only value type supported in Novell EDirectory authentication mode. Examples: "LDAP://192.168.1.134" (192.168.1.134 is domain controller's IP address) for domain "teachers.mycollege.edu" LDAP path is "LDAP://DC=teachers,DC=mycollege,DC=edu". You can limit access for users and groups only from one Organization Unit like: "LDAP://OU=staff,DC=HOMEELEMENT-IT,DC=COM" ("staff" OU of "homeelement-it.com" domain) "LDAP://teachers.mycollege.edu" "LDAPS://teachers.mycollege.edu" (only for Active Directory) To use SSL/TLS protocol to encrypt the network traffic with Active Directory server, use the LDAPS prefix. This option is available only for Active Directory, Novell eDirectory authentication mode always utilizes SSL/TLS protocol. When specifying this option, an SSL certificate must be installed and available in Active Directory. Make sure that the certificate is valid, trusted by the web server machine, and the server name specified in the LDAP path matches the subject of certificate, otherwise the LDAP connection will fail. Multi-domain value for supporting a number of domains. For example, "STAFFDOMAIN@LDAP://192.168.1.2|STUDENTSDOMAIN@LDAP://192.168.1.3|WEBSRV@WinNT://192.168.1.15|LDAP://192.168.1.18/OU=staff,DC=HOMEELEMENT-IT,DC=COM" This example specifies two domains, one local account database, and one domain controller. Value format is: LOGONDOMAINPREFIX1@LDAPPATH1|LOGONDOMAINPREFIX2@LDAPPATH2|LDAPPATH3|etc. Multi-domain value consists of a number of components separated with vertical bar ('|') character. Each component may be a Ldap or WinNT path or has "DOMAIN@LDAPPATH" form. The Ldap/WinNT path to use is selected based on the domain/machine name of the current user. When the current user is logged in with domain account, FQDN and NetBIOS name of the domain is used. When the current user is logged in with local machine account, NetBIOS name of the Web Server machine is used. When component has a form of Ldap/WinNT path, domain/machine name of the current user is matched against the server portion of the path. When the component has "DOMAIN@LDAPPATH" form, the domain/machine name of the current user is matched against "DOMAIN" part. In both cases, the comparison is case-insensitive. If the user logs into the application as "STAFFDOMAIN\Mike", the application uses "LDAP://192.168.1.2" as the provider path (Staff domain). If the user logs in as "STUDENTSDOMAIN\John", the application uses "LDAP://192.168.1.3" as the provider path (Students domain). If the user logs in with a web server local user name like "WEBSRV\Chris", "WinNT://192.168.1.15" is used as the provider. This parameter supports the %DOMAINNAME% placeholder. It is replaced with the FQDN domain name of the current user if the user logged in with a domain account, or with the NetBIOS machine name if the user logged in with a local machine account. | ""

## Ldap path structure

The LDAPContainer parameter may explicitly contain Ldap path or Ldap path may be a part of multi-domain value assigned to this parameter. The text below describes the format of Ldap path.

LDAP[S]://<server>/<object name>

The Ldap path starts with a provider name LDAP or LDAPS which distinguishes it from other paths that HTTP Commander supports. It is recommended to write ldap word with all capital letters despite the fact HTTP Commander process it in a case-insensitive way. LDAPS is a shortcut notation to request SSL/TLS encryption of the connection.

The server part specifies what server we wish to use. It may take the following values:

- DNS-style name
- NetBIOS name
- IP address
- not specified

The DNS-style name may be:

- The fully qualified DNS name of the domain controller or global catalog server
- The fully qualified DNS name of the domain or forest
- The unqualified name of the domain or forest (which is often but not always the same as the NetBIOS)

You may omit the server name (called serverless binding). For example, Ldap path may look like this LDAP://DC=mydc,DC=mydomain,DC=com.

Note When you omit the server, you have to omit the slash following the server part as well. The path LDAP:///DC=mydc,DC=mydomain,DC=com is invalid.

If we do not specify a specific server name, either with serverless binding or by using the name of the domain, the Windows runtime will try to find an appropriate Active Directory server for us. By avoiding the specification of a particular server, we reduce the chances of overloading that server with requests, or of complete failure if that particular domain controller is down for maintenance or otherwise unavailable. This leads to more scalable and robust applications.

How does Windows runtime know what domain to use when it is not specified in Ldap path? It infers a domain to be used based on the security context of the current thread. When impersonation is turned on, the security context of the thread will the security context of the logged in user, otherwise that will be context of the application pool. If the account is an Active Directory domain account (and not a local machine account), then the domain of that account is used to find a domain controller. The serverless binding does not work at all under a local machine account.

You can safely omit server name in the Ldap path provided that:

- ASP.NET impersonation is turned on;
- you always log into HTTP Commander with a domain account.

We discourage the use of serverless binding in HTTP Commander. Consider using the DNS name of the domain in place of the server name. This option takes advantage of automatically selecting the available domain controller, but does not depend on the current security context.

A lot of choices are available to specify the server part in Ldap path. Note however that the number of options is more limited if Ldap server requires SSL. The name you specify in Ldap path must match the one specified in server certificate. In case of mismatch, the bind may fail. We recommend the use of a fully qualified DNS name of the server or domain as it is most likely specified in server's certificate.

You may specify the port number if your server listen for Ldap requests on nonstandard port. Append the port number to the server name. For example: LDAP://10.10.11.100:50000/OU=somecontainer,O=mydirectory.

object name part is Distinguished Name of the root of Ldap searches. You may omit this part of Ldap path. For example, LDAP://mydc.mydomain.com. When DN is omitted, the application search in the whole directory.

## Recommendations on configuring Active Directory parameters

Always set UseUniversalWayToReadGroups to true unless you plan to work with distribution groups. When this parameter is turned on, the list of user's groups contains security groups but misses the distribution groups.

For Active Directory accounts, assign LdapContainer to "LDAP://<fully qualified DNS name of the domain>", for example, "LDAP://demo.element-it.com". We recommend against specifying name or IP address of any particular Domain controller on place of Ldap server. Windows takes care of finding an appropriate server to perform the request, it tries to balance the load among available servers.

For local accounts, assign LdapContainer to "WinNT://<server-name>". Here <server-name> is the name of the web server hosting HTTP Commander.

Parameter below defines static way to read AD info:

Key | Description | Default value
ADAccountsFilePath | Path to the static file with Active Directory users and groups info. This is the alternative way to read AD info. This way will work in 100% cases because the administrator can run the ADManager utility at the domain controller server. Therefor, all info will be read and stored in the file. This file includes all needed info about users and groups from Active Directory. Type here the path to the local file or the file stored at the remote server. If the application finds this file, then it will use the info from this file without requests to Active Directory. Note! Static file includes only users/groups created since the last ADManager utility execution. If you need the file to be updated all the time, then you can add ADManager execution to the Windows scheduler. For more info related to ADManager work, run it and view the info at the main interface. The ADManager utility is stored at Bin\ADManager.exe or can be downloaded from the Element-IT site. Type an empty string value if you don't want to use a static file (Use dynamical direct requests to AD). | ""

Other Active Directory parameters

Key | Description | Default value
CheckPasswordExpiredPeriod | Specifies the time period in days when to start notifying the user about approaching password expiration. The password expiration monitoring applies to Windows accounts only. For example, if you set this parameter to 7, then HTTP Commander will calculate the number of days till your password will expire. If the calculated value is less than or equal to 7 days, the application shows a warning box at the user logon. The message states that the user's password is about to expire and indicates the number of days left. Set this parameter to 0 for disable the check. | 0
DefaultDomain | Default domain: domain name or NetBIOS machine name to append to unqualified account name. When user or group name is specified without the domain part, HTTP Commander appends this string to the name before trying to resolve the name. Value of this parameter may be the Fully Qualified Domain Name of domain, the NetBIOS domain name, or the NetBIOS name of the web server machine. Name resolutions occurs in a number of places in HTTP Commander: Application validates the user's credentials entered in the web form (in "Forms with Windows Users" authentication mode). HTTP Commander's administrator assigns folders to users and groups in the Admin Panel. Application reads the configuration files that include account names (in "Windows" and "Forms with Windows Users" authentication mode). | ""

## User interface settings

Key | Description | Default value
ToolbarButtons1 | The visible buttons in the toolbar. You can hide some of the buttons by modifying this key. The "Administration" button is visible only for administrators - see the "Administrators" key. If you want to add or modify the logo button see FAQ. The value Separator can be repeated several times, but not in a row. It is possible to specify the display method of the button by inserting a colon after the name - Folders:noicon, View:icononly. | "Folders,View,Favorites,Search,FileMenu,Upload,Clouds,Administration,Settings,Help,Logout"
ToolbarButtons2 | The visible buttons in the second toolbar. You can hide some of the buttons by modifying this key. The value Separator can be repeated several times, but not in a row. It is possible to specify the display method of the button by inserting a colon after the name - Download:noicon, Rename:icononly. | "ViewEdit,Share,ViewPublicLinks,Download,New,Rename,Delete,Copy,Cut,Paste,Details,More,Separator,Select,Refresh"
DefaultLanguage | The default language. The value is the name of file localization without extensions. See Localization section of the Documentation for more info. | "English"
ItemsPerPage | Max items quantity per page in the files list. Set 0 if no pages (Always show all items at one page). Note that 1000 files on a page can take a number of seconds to load. Don't set the value greater than 1000. | 500
ImageViewer | Image viewer in the user interface. Available values: BuiltIn and LigthGallery (used by default). | "LigthGallery"
HideTree | Set to true to make the state of the folder tree panel collapsed when a user logons. | false
TreeView | Key defines tree view. Value can be: Disabled - tree is disabled and hidden, Enabled - tree is enabled and autoexpandable, NotAutoExpandable - tree is enabled and not autoexpandable. Tree with auto expanding enabled makes work slower so you can disable it (if you have a small number of folders in the folder structure and tree view is not required). | "NotAutoExpandable"
AutoOpenFirstFolder | The key defines if the content of first root folder should be shown when a user logons. Applied only if tree view is available. | true
HideDetailsPane | Set true to make the state of details pane (with file properties, on right side) collapsed when a user logons. | false
DisableDetailsPane | Set true to disable details pane with file properties (on right side). | false
IsEmbeddedtoIFRAME | Set true if HTTP Commander is placed to IFRAME (IFRAME mode). | false
AvailableDetailsTitles | Defines the set of details (metadata) that users can assign to files and folders. For example, users can add comment, description, authorship, locking metadata to files and folders. A metadata item may allow single or multiple values (multivalued metadata). Parameter format: comma-separated list of items. Each item specifies the metadata name followed by a boolean flag indicating singlevalued/multivalued metadata (singlevalued - false, multivalued - true). "Custom" metadata allows using any metadata names. Otherwise users can only assign metadata listed in this parameter. "" (Empty string) - details feature is prohibited. Example: "Description:False,Comment:True,custom:True" (Details with titles "Description", "Comment" and user's custom metadata are available. Comment and Custom are multivalued) Note: There are several predefined details fields names with special meaning: "Comment" - this field used to store comments for files/folders. If it is specified (by default), special text area will be rendered in details window for quick comments addition. Also count of comments will be displayed for each file in file list if ShowFileMarkWhenExistsDetails setting is enabled. "_label_" - This field used to store information about file/folder label. This name is reserved and could not be used. Implementation details File/folder metadata are stored in "Metadata" NTFS stream in JSON format. | "Comment:True,Description:False"
DetailsFields | The key defines the columns for the details table. You can modify this parameter only if AvailableDetailsTitles is defined. By default details table includes the Details Title, Value, User last modified name and Last modified date columns. You can add extra columns. Parameter format: value="columnname1#type,columnname2#type" "columnname1" and "culumnname2" are titles for columns. "type" is a value type. There are 5 available types: string, int, float, boolean, date. Example: For file locking tags, you need to set: value="locked#boolean" This is not a real locking feature but users can set a tag that the file is locked. | ""
DisplayedDefaultColumnsInList | Defines the list of columns available and visible by default in the file list. A user may show/hide any available column in the file list. By default file size, labels and date modified columns are visible, type, date accessed and date are available but hidden. Parameter format: comma-separated list of items. Item format: <column_name>[:<True|False>][:<column_width>] Each item specifies column name followed by boolean flag indicating if the column is shown by default. Additionally, through the colon can be specified column width in pixels. If the width is not specified, the width will be used by default for the corresponding column. The display order of columns is the same as in the list. You may use the following predefined columns: "size", "labels", "type", "datemodified", "datecreated", "dateaccessed", "downloads". In addition you may use metadata columns to display metadata defined in AvailableDetailsTitles parameter. Thus, if the visibility flag is not specified, the column will be displayed (which corresponds to visibility True). If the column width is not specified, then the following values (in pixels)​​: size, downloads — 70 labels, type, datemodified, datecreated, dateaccessed — 140 The width of each of the remaining columns (except column name) will be automatically calculated depending on the remaining space on the screen Also note that the column with the file name (name) is displayed regardless of whether it is specified in the list with the visibility flag or not. Also, the size of this column is autoexpandable, so specifying the size for it to have any effect. But you can specify the column name in the list that change its display order, for example by specifying "type,size,name", the column name will be visible to third. Example: "size:True:100,type,datemodified:True,comment:True:300". Note 1! Don't use too many columns because each column makes the list loading slower. Note 2! Column downloads is available when EnableDownloadsCounting is "true". Also note that after downloading the file, the value in this column is not updated automatically, you need to update the contents (button "Refresh"). Note 3! If column labels is not present in this parameter value (or present with False flag), than labels and icons (new, updated files, locked, have a public link, available details/comments) will be displayed near file name | "labels:True,size:True,type:False,datemodified:True,datecreated:False,dateaccessed:False"
EnableFilesFoldersLabels | The key to enable/disable the ability to view/set labels for files, folders. See also PredefinedListOfLabels parameter. | true
PredefinedListOfLabels | Predefined list of labels for files/folders. Parameter format: comma-separated list of items. Each item specifies the label name followed by a HTML color string (named or hex). For example: Orange label:#ffd800, Green label:green See also EnableFilesFoldersLabels parameter. | "APPROVED:#38761D,PENDING:#E69138,REJECTED:#990000"
LogoHeaderHtml | Key defines HTML code for the top header. By default it contains "Your logo here" image with link to website and link to Manual. Set "" (empty string) to hide the logo header. | "<div style='text-align:center'><a href='http://www.yoursite.com'><img alt='' border='0' style='cursor: pointer;' src='Scripts/logolarge.png' width='194' height='33' /></a><br />Welcome to the Web File Manager. Please, read <a href='#' onclick='showHelpWindow();return false;'>User Manual</a> first.</div>"
LoginFormHeaderLogoUrl | Key defines the url to logo image for the login (register/recover password/recover name/change email ) page. By default relative url 'Scripts/logolarge.png' is used. Set "" (empty string) to hide logo image on the login form. You can replace the Scripts/logolarge.png file with your own or specify different absolute or relative URL to your own imnage, for example Images/mylogo.png or Scripts/mylogo.png. See also parameters LoginFormHeaderHtml, LogoHeaderHtml, WelcomeWindowMessage. | "Scripts/logolarge.png"
LoginFormHeaderHtml | Key defines HTML text displayed on the top of the login (register/recover password/recover name/change email) page right below the logo image (LoginFormHeaderLogoUrl). Set "" (empty string) to hide header on the login form. See also parameters LoginFormHeaderLogoUrl, LogoHeaderHtml, WelcomeWindowMessage. | "<span style='font-size:16px;color:#15428B;'>Welcome to the Web File Manager</span>"
WelcomeWindowMessage | Key defines HTML text in the welcome window that will be shown during the first user logon. You can set "" (empty string) to hide the welcome window. | ""
WelcomeWindowAllowHideOnNextLogon | Customize allows users to skip the Welcome Window at next logon. If set to true, and set a welcome message, then at his show, it will also be displayed checkbox to be able to hide this message at next logon (stored in browser cookies). | true
DoubleClickAction | Key defines default action for mouse double click event. Available values: "Download", "Showmenu", "View", "Nothing" and "Choose". If you specify Choose, the user will be given the option for each file type to select the default action by double-clicking from the View / Edit context menu, which is saved (in the browser cookie) and the next time you double-click it will be called. Also for the Choose value, there is a list of associations of some file types with the actions that are specified in Scripts\Main.js: ... DEFAULT_ASSOCIATIONS: { 'view': ';pdf;txt;text;lst;list;log;json;def;dic;exc;wtx;scp;c;cpp;cs;cxx;conf;g;h;hh;asm;bas;cnf;map;vcs;xdr;', // text & pdf 'download': ';zip;7z;rar;gz;tar;arj;ace;cab;iso;', // Download 'preview': ';jpg;jpeg;jpe;jfif;bmp;dib;gif;png;tif;tiff;ico;svg;', // images 'djvu-view': ';djvu;djv;', // DjVu files 'ebook-read': ';epub;', // e-Book files 'flash-preview': ';swf;', // SWF 'autodesk-view': ';3dm;3ds;asm;cam360;catpart;catproduct;cgr;collaboration;dae;dgn;dlv3;dwf;dwfx;dwg;dwt;dxf;exp;f3d;fbx;g;gbxml;iam;idw;ifc;ige;iges;igs;ipt;jt;model;neu;nwc;nwd;obj;prt;rvt;sab;sat;session;skp;sldasm;sldprt;smb;smt;ste;step;stl;stla;stlb;stp;wire;x_b;x_t;xas;xpr;', // Autocad 'play-video-js': ';4xm;iff;iss;mtv;roq;aac;ac3;act;adf;aea;aiff;alaw;amr;anm;apc;ape;applehttp;asf;ass;au;avi;avs;bethsoftvid;bfi;bin;bink;bit;c93;caf;cavsvideo;cdg;daud;dfa;dirac;dnxhd;dshow;dsicin;dts;dv;dxa;ea;ea_cdata;eac3;f32be;f32le;f64be;f64le;ffm;ffmetadata;film_cpk;filmstrip;flac;flic;flv;g722;gsm;gxf;h261;h263;h264;idcin;idf;image2;image2pipe;ingenient;ipmovie;iv8;ivf;jv;latm;lavfi;lmlm4;loas;lxf;m4v;matroska;webm;microdvd;mjpeg;mlp;mm;mmf;mov;mp4;m2v;m4a;3gp;3g2;mj2;mpc;mpc8;mpg;mpeg;mpegts;mpegtsraw;mpegvideo;msnwctcp;mulaw;mvi;mxf;mxg;nc;nsv;nut;nuv;ogg;ogv;oma;pmp;psxstr;pva;qcp;r3d;rawvideo;rl2;rm;rpl;rso;rtp;rtsp;s16be;s16le;s24be;s24le;s32be;s32le;s8;sap;sdp;shn;siff;smk;sol;sox;spdif;srt;swf;thp;tiertexseq;tmv;truehd;tta;tty;txd;u16be;u16le;u24be;u24le;u32be;u32le;u8;vc1;vc1test;vfwcap;vmd;voc;vqf;w64;wc3movie;wsaud;wsvqa;wtv;wv;xa;xbin;xmv;xwma;yop;yuv4mpegpipe;wmv;f4v;mkv;', // Video 'play-audio-html5': ';3gp;aac;act;aif;aiff;alac;amr;ape;atrac;au;awb;dct;dss;dvf;iklax;ivs;flac;gsm;m4p;mid;midi;mmf;mp3;mpc;mpw;msv;mxp4;ogg;ra;ram;raw;tta;vox;wav;wma;' // Audio }, ... You can change the default associations. To do this, open the Main.js file in the text editor, find the line DEFAULT_ASSOCIATIONS:{ and after { make the changes, save the file. For example, if you want to remove associations by default, replace with DEFAULT_ASSOCIATIONS:{}. The following types of actions are available:
    'view', 'djvu-view', 'ebook-read', 'download',
    'preview', 'flash-preview', 'mso-edit', 'msoo-edit',
    'office365-edit', 'ooo-edit', 'owa-view', 'google-edit', 'google-view',
    'onlyoffice-edit', 'autodesk-view', 'sharecad-view', 'box-view', 'zoho-edit',
    'image-edit-in-pixlr', 'image-edit-in-adobe', 'play-video-js',
    'play-audio-html5', 'video-convert', 'cloud-convert', 'edit'
The file extensions are enumerated through a semicolon, with the ';' at the beginning and end of the line with the file types. For example: ';txt;xml;'. Note 1! If for this parameter set value of "View" and file type isn't supported for viewing in browser, file will be downloaded. Note 2! If for this parameter set value of "Choose" and the action selected by the user is not available (for example, from the rights restrictions), then a context menu will be displayed (which corresponds to the value of "Showmenu") | "Showmenu"
CopyMoveToDisplayMode | Setting determines copy and move modes available for users and the way how corresponding menu items are displayed. HTTP Commander support "copy/cut to clipboard", "copy/move to..." and combined modes. Possible values: Disabled - "copy/move to.." mode is disabled. Items 'Copy to...', 'Move to...' are unavailable. 'Copy', 'Cut' items are displayed directly in context menu. InContextFirstLevelMenu - "copy/move to.." mode is enabled, corresponding menu items are displayed directly in context menu on the same level as the items 'Copy', 'Cut'. InContextSecondLevelMenu (by default) - "copy/move to.." mode is enabled. Corresponding menu items are displayed in second-level menu along with copy/cut to clipboard items. I.e. in context menu displayed Copy and Cut menu items which opens second-level menu. OnlyCopyMoveTo - copy/move to.." mode is enabled , while "copy/cut to clipboard" is disdabled. Menu items 'Copy to...', 'Move to...' displayed directly in the context menu. Note! This setting also affect the items (copy, cut) on the toolbar. See ToolbarButtons2, ToolbarButtons1 settings. | "InContextSecondLevelMenu"
AllowUsersWatchModifications | Defines whether users can watch for modifications on files and folders with a possibility of notifications by email. If this option is enabled, users are allowed to start watch on any folder or file using the "Watch for modifications.." item from the context menu. Note. If this feature is enabled, you can additionally control it on a folder level using the permission settings. Note! For watch available any actions on the files and folders that are specified in the parameter LogEvents, by taking into account those that are applied to files and folders (View, Download, Upload, Create, Modify, Edit, Rename, Delete, Restore, Copy, Move, OfficeLock, OfficeUnLock, CreatePublic). This setting depends on the parameter LogEvents. If LogEvents parameter missing all actions that are applicable to the files, the ability to monitor is not available, even if this option is enabled. See also advanced parameters (hidden by default): SendNotificationsIntervalOfWatchedChanges, MailSubjectOfWatchedChanges. | true
EnableRecents | Defines if "Recents" feature available for users or not. If enabled, users will see special "Recents" root folder, where they can find all files they recently worked with. See also advanced parameters (hidden by default): UsersDataEventsMaxCount, OldDataCleaningInterval. | true
EnableSendEmail | Defines if users can send email. Values: "Disable"-disable email feature, "LinksOnly" -enable with link to file, "Any"-enable with both links and attachments, "AttachmentsOnly"-enable with attachments only. Note! Sending large attachments can busy your mail server. Set "Disable" or "LinksOnly" value to prohibit attachments. You need also to configure mailSettings section at web.config file and type your mail server, port and user if authentication is needed. | "Any"
EMailFromName | "From" name in the email while sending any emails ("Send email", etc features). See also TplForAddUserNameToDisplaySenderNameWhenSendEmail parameter. | "Web files manager"
TplForAddUserNameToDisplaySenderNameWhenSendEmail | Templated string for add user name to diplay sender name when send email. When sending mail ("Send email" feature from context menu or toolbar) as displayed name of ender value from EMailFromName parameter is specified. The TplForAddUserNameToDisplaySenderNameWhenSendEmail parameter allows to add in addition information on user name, sent mail. In value of this parameter the template {0} instead of which the current user name when sending is added is used. If this template is absent in string, to be added nothing. | "Email from {0}"
DefaultGridView | Key defines the default list view: Detailed or Thumbnails. The view mode state is stored in users cookies after they changed mode. Additionally, you can configure the settings in section Thumbnails. | "Detailed"
EnableEditAsTextFile | Key defines if users can edit (or view if there is no modify permissions or file is locked) any file as text file. If this feauture is enabled and no modify permission or file is locked, file will be open read-only. You can disable this feature or disable modify permission for schoolchildren because they can damage non-text files like .doc, etc. See also MaxSizeForEditAsTextFile parameter. | true
EnableLinkToFile | Key defines if users can make a link to a file (at menu). In case of the user two links will be shown: the 1st for the file downloading, the 2nd link opens the folder with the file and highlights it. | true
EnableLinkToFolder | Key defines if users can make a link to a folder (at menu). | true
EnableVersionControl | Key defines if users can use filesversioning feature: Check-in, Check-out, Versions list. For it to work, the feature creates a folder ".Versions" at the root of each folder. | false
AllowFullVersionControlOnlyForAdmins | Key defines if only administrators (See Administrators parameter) can check-in files that were checked-out by other users. Set false (Default) if any user can check-out files which were checked-in by other users. | false
ShowVersionsFolderForAdmins | Show or hide versions folders for administrators. | true
TimeIntervalMarkRecentlyCreatedFiles | Key defines if recently created files should be marked by "new" icon. Set the value in hours (Maximum time interval after file created) or 0 to disable this feature. | 48
TimeIntervalMarkRecentlyModifiedFiles | Key defines if recently modified files should be marked by "updated" icon. Set the value in hours (Maximum time interval after file modified) or 0 to disable this feature. | 48
EnableDownloadsCounting | Enable or disable downloads counting for files. File downloads can be found in the "Details" by calling it from the context menu or from the toolbar. Or you can add a column "downloads" to the list DisplayedDefaultColumnsInList. | true
WriteFileModificationsMetadata | Enable files modifications (creation, changes) history (Data stored in files metadata) | true
BulkMailSendSettings | Settings for bulk mails sending. Available values: "Disabled" - bulk mails sending is disabled; "DoNotShowUsers" - User can select only groups to send emails; "ShowUsersWithoutEmails" - User can select groups and/or individual users to send emails (emails are hidden); "ShowUsersWithEmails" - User can select groups and/or individual users to send emails (emails are shown). | "Disabled"
SearchCriterionsOfFiles | The list of criteria for search of files. Appropriate fields will be available for input in search window. Available values: Name, Details, Content, Date. See also parameters SearchMethodOfFiles, EnableWindowsSearchQueryBuilder in Main section and MaxSearchResultsPerPage in UI section. | "Details,Date"
MaxSizeForEditAsTextFile | The maximum file size for editing or view file as text in bytes. Default - 192 Kb. See also EnableEditAsTextFile parameter. | 196608
EnableConvertingVideo | Enable/disable converting video. | false
EnablePlayVideo | To enable/disable playing video files in browser. If you use this feature, also recommended to set the value of the ResumableDownload parameter to true. Enabling this option may improve the ability to skip/rewind audio and video during playback. | True
EnablePlayAudio | To enable/disable playing audio files in browser. If you use this feature, also recommended to set the value of the ResumableDownload parameter to true. Enabling this option may improve the ability to skip/rewind audio and video during playback. | True
AllowSetPasswordForZipArchives | To allow setting the password for zip archives. | true
ToolbarIconSize | The size of icons for buttons on the top toolbar. Available values: "Large", "Small". | "Large"
StyleThemeName | Style theme name. If the name isn't set, or the file isn't found in the directory Images\resources_1.5\css with the name xtheme-YourStyleThemeName.css, the color scheme by ExtJs default (blue) will be used. In a distribution kit there are 9 additional themes gray, access, extbuilder.dynalias.com-example, azzurra-black, azzurra-blue, azzurra-gray, azzurra-green, azzurra-orange, azzurra-red. | "azzurra-blue"
AllowCreateShortcuts | Enable creation of shortcuts (symbolic links). | true
ShowFullScreenOrExitFullScreenButton | Key defines whether the fullscreen/exit fullscreen button is shown. For use of these buttons: Set this parameter to true in the Default.aspx file find a line <!-- Opening embedded tag DIV --> and make sure there is a line below: `<div id="httpCommander" style="position:relative !important;width:800px;height:600px;left:50px;top:50px;">` Also find line <!-- Closing embedded tag DIV --> and make sure there is a line below with closing DIV tag: `</div>` You also can change attributes of style at the DIV element: width, height, etc. Note. It is recommended not to change attribute of position style. See also DefaultViewMode parameter. For more datails see interfaceview.html page. | false
DefaultViewMode | Key defines interface view mode (fullscreen or inside DIV element). If you place HTTP Commander in the DIV element (see parameter ShowFullScreenOrExitFullScreenButton) also set for this parameter "InsideDiv" value, by default the interface it will be shown in this DIV element. Otherwise it will be unrolled in all screens of the browser (value by default "FullScreen"). For more details see interfaceview.html page. | "FullScreen"
ShowFileMarkWhenLockedByWebdavClient | This parameter allows/forbids showing a lock icon at file in the list if it is locked by the WebDav client. See also ShowUserNameWhenLockedByWebdavClient parameter. | true
ShowUserNameWhenLockedByWebdavClient | This option allows / disables the display of the user name that locked the file when editing on the WebDAV client. Applicable only if ShowFileMarkWhenLockedByWebdavClient = true. And it is displayed in tool tip of the lock icon. Available values: Enabled (by default) - show user names for all logged users OnlyForAdmins - show only for administartors (with full privileges or those who have rights to manage users) Disabled - the names of users for locked files are not displayed | "Enabled"
AllowAdminsToUnlockFiles | Allow administrators to unlock files that are locked when edited by other users in WebDAV clients. If this option is enabled, then in the main interface, in the list of files, for administrators there will be an opportunity to remove the lock from files that are marked with the lock icon (by clicking on this icon). Note! When unlocking, all user locks are removed, and the read-only flag is removed, regardless of whether there is a right to modify the file or the WebDAV option (see Folder Permissions). | true
ShowFileMarkWhenExistsDetails | This parameter allows/forbids showing a details icon at file in the list if it has Details info. | true
Thumbnails settings
FileCategoriesForViewThumbsInTooltipRowGrid | The file categories for which thumbnails will be displayed in the tooltip for a row in the file list. User can move mouse over image fle name (jpg, jpeg, jpe, jfif, bmp, dib, gif, png, tif, tiff, ico, svg, emf, wmf) and view thumbnail (maximum 160x120 pixels). See also parameter below (file type categories). | "Image,Video,Audio,Pdf,MsOffice,OpenOffice,Exe,eBook"
FileCategoriesForGridInThumbViewMode | The file categories for which thumbnails will be displayed in Grid Thumbnails View mode. Key defines if images thumbnails will be shown instead of icons at the thumbnail view mode. A list of categories and file types for displaying thumbnails, you can find (and modify) in the file Scripts\Main.js: ... HttpCommander.Lib.Consts.ThumbTypes = { 'Image': ';jpg;jpeg;jpe;jfif;bmp;dib;gif;png;tif;tiff;ico;svg;emf;wmf;', 'Video': ';4xm;iff;iss;mtv;roq;aac;ac3;act;adf;aea;aiff;alaw;amr;anm;apc;ape;applehttp;asf;ass;au;avi;avs;bethsoftvid;bfi;bin;bink;bit;c93;caf;cavsvideo;cdg;daud;dfa;dirac;dnxhd;dshow;dsicin;dts;dv;dxa;ea;ea_cdata;eac3;f32be;f32le;f64be;f64le;ffm;ffmetadata;film_cpk;filmstrip;flac;flic;flv;g722;gsm;gxf;h261;h263;h264;idcin;idf;image2;image2pipe;ingenient;ipmovie;iv8;ivf;jv;latm;lavfi;lmlm4;loas;lxf;m4v;matroska;webm;microdvd;mjpeg;mlp;mm;mmf;mov;mp4;m2v;m4a;3gp;3g2;mj2;mpc;mpc8;mpg;mpeg;mpegts;mpegtsraw;mpegvideo;msnwctcp;mulaw;mvi;mxf;mxg;nc;nsv;nut;nuv;ogg;ogv;oma;pmp;psxstr;pva;qcp;r3d;rawvideo;rl2;rm;rpl;rso;rtp;rtsp;s16be;s16le;s24be;s24le;s32be;s32le;s8;sap;sdp;shn;siff;smk;sol;sox;spdif;srt;swf;thp;tiertexseq;tmv;truehd;tta;tty;txd;u16be;u16le;u24be;u24le;u32be;u32le;u8;vc1;vc1test;vfwcap;vmd;voc;vqf;w64;wc3movie;wsaud;wsvqa;wtv;wv;xa;xbin;xmv;xwma;yop;yuv4mpegpipe;wmv;mkv;', 'Audio': ';aa;aac;aax;aif;aiff;ape;dsf;flac;m2a;mp1;mp2;mp3;oga;ogg;opus;wav;wma;wv;', 'Pdf': ';pdf;', 'MsOffice': ';doc;docx;xls;xlsx;ppt;pptx;ppsx;vsd;vsdx;', 'OpenOffice': ';odt;ods;odp;odg;odf;odm;', 'Exe': ';exe;', 'eBook': ';epub;' }; ... | "Image,Video,Audio,Pdf,MsOffice,OpenOffice,Exe,eBook"
DisplayFileIconOnThumbnails | Display file icon on thumbnails in Thumbnails Grid View mode. Applicable if enabled FileCategoriesForGridInThumbViewMode. | true
MaxHeightThumbnailInGrid | The maximum height of the image thumbnails in the files list in a display mode "Thumbnails". Value of this parameter should be in limits from 48 to 256. | 100
MaxWidthThumbnailInGrid | The maximum height of the image thumbnails in the files list in a display mode "Thumbnails". Value of this parameter should be in limits from 48 to 256. | 100
ThumbnailsTempFolder | Temporal folder on the server for storage thumbnails images. If such folder it will be not specified the value of TemporaryFolder is used. | ""
PdfThumbnailPageNumber | Number of the PDF document page for displaying the thumbnail. This setting can be used if the meaningful contents of a PDF document starts not from the first page. | 1

## File upload/download parameters

Key | Description | Default value
EnableDnDUploader | The key defines if drag & drop uploader is available. It is HTML 5 based uploader supported by most of modern browsers : IE 10+, FireFox 16+, Chrome 23+, Safari 5.1+, Opera 12.1+ . Users can drop files to any place of main interface. It is strongly recommended to enable this uploader because it is most stable and don't need any extra plug-ins. Note: In Chromium based browser folders drag & drop is supported. See also DragNDropCountOfParallelUploadingFiles and AllowPasteImagesFromClipboard parameters. | true
AllowPasteImagesFromClipboard | The key defines if users are allowed to paste an images from the clipboard (for Chrome based, Firefox and Edge browsers only and if EnableDnDUploader=true). If this option is enabled (value 'true') and allowed the Drag & Drop uploader, then Chrome based, Firefox and Edge browsers provides opportunity to paste (using the keyboard shortcut CTRL+V) the image from the clipboard (for example, when a sceen captured by PrtSc) and upload it using Drag & Drop uploader. | true
EnableSilverlightUploader | The key defines if Silverlight based multiple files uploader is enabled (Drag & drop, Resumable and very large files uploading). Note: Silverlight plugin is not supported by some browsers. More info at Upload/Download page. | false
EnableFromUrlUploader | The key defines if users can upload file from an Internet URL (File servers or images sharing services like DropBox, Picasa, Flickr, Facebook, Photobucket). Users can use FTP or HTTP links. | true
EnableDownloadToDropbox | The key defines if users can download files to their own Dropbox account. Dropbox.com is a free very popular worldwide file sync, sharing and backup solution. This feature doesn't need any extra configuration at IIS. Users don't send their Dropbox password to the application (Authentication is passed at Dropbox.com website). Note! For using this feature you need also to configure following parameter: DropboxConsumerKey. For more info see Integration with Dropbox. | true
EnableUploadFromDropbox | The key defines if users can upload files from their own Dropbox account. Note! For using this feature you need also to configure following parameter: DropboxConsumerKey. For more info see Integration with Dropbox. | true
EnableDownloadToBox | The key defines if users can download files to own Box account. For using this feature please check whether the value specified for the parameters BoxClientId and BoxClientSecret. Note 1! Be sure to use an SSL connection to HTTP Commander (see FAQ: How can I use HTTP Commander with SSL?). Note 2! For using this feature please make sure whether the Update KB2468871 to .NET Framework 4 is installed, and if not, install it on the server with HTTP Commander (update details info: KB2468871). | true
EnableUploadFromBox | The key defines if users can upload files from own Box account to HTTP Commander folder. For using this feature please check whether the value specified for the parameters BoxClientId and BoxClientSecret. Note 1! Be sure to use an SSL connection to HTTP Commander (see FAQ: How can I use HTTP Commander with SSL?). Note 2! For using this feature please make sure whether the Update KB2468871 to .NET Framework 4 is installed, and if not, install it on the server with HTTP Commander (update details info: KB2468871). | true
EnableJavaUploader | The key defines if the Java applet multiple files and folders uploader is enabled. Note: Java plugin is not supported by some browsers. More info at Upload/Download page. | false
EnableJavaFoldersUpload | The key defines if the folder upload is enabled in Java uploader. Note: Java plugin is not supported by some browsers. More info at Upload/Download page. | true
EnableJavaChunkedUpload | The key defines if chunk upload mode is used for Java uploader. It allows resumable upload and the upload of very large files (greater than 2 GB). By default the key is disabled. Note: Java plugin is not supported by some browsers. More info at Upload/Download page. | false
EnableJavaDownloader | The key defines if Java multiple files and folders downloader is enabled. Note: Java plugin is not supported by some browsers. More info at Upload/Download page. | false
EnableDownloadToGoogle | The key defines if users can download files to their own Google accounts (Google Drive service). This feature doesn't need any extra configuration at IIS. Users don't send their Google password to the application (Authentication is passed at Google website). Upload from Google Drive/Download to Google Drive - the possibility to share files with Google Drive storage. Google Drive allows the user to edit documents and convert them into different formats (docx, rtf, png, pdf, html, odt, xlsx, ods, pptx and etc.). Users just need to have Google account (for example, gmail.com email box) or to register. Users can download the files from HTTP Commander folder to their Google Drive account or upload documents from Google Drive to HTTP Commander folder. To edit documents online, a user clicks a link in HTTP Commander or opens the https://drive.google.com/ page in a browser. This is a free service with some limitations. If your users have Business account in Google Docs, they will have more possibilities. Although the free service includes a plenty of helpful functionalities. Note. Also surely set value for GoogleClientId parameter. For more info see How to configure integration with Google Drive. | true
EnableUploadFromGoogle | The key defines if users can upload files from Google Drive to an HTTP Commander folder. This feature allows users to upload documents from Google Drive account to the folder. Note. Also surely set value for GoogleClientId parameter. For more info see How to configure integration with Google Drive. | true
EnableDownloadToSkyDrive | The key defines if users can download files from HTTP Commander folder to their own OneDrive account (Microsoft Live ID). OneDrive allows users to share their own files, edit office documents online and much more. Visit onedrive.live.com/about for details. For more info see How to configure integration with Microsoft OneDrive. | true
EnableUploadFromSkyDrive | The key defines if users can upload files from their OneDrive account (Microsoft Live ID) to a HTTP Commander folder. For more info see How to configure integration with Microsoft OneDrive. | true
UploadersOrder | Uploaders tabs order. You can define which Uploader will be first and the order of others. | "Simple,DragNDrop,Java,Flash,Silverlight,GoogleDocsDrive,Dropbox,SkyDrive,Box,FromUrl,iOS"
UploadFormFields | Form fields for file upload. Form fields displayed in "Standard upload" tab of upload window. All files selected for upload will contain specified metadata after upload. Value is a comma separated list of configuration options for form field. Format of configuration option for single field : name:type:required:description:values where 'name' - name of form field. It is recommended to use the same name for field as in AvailableDetailsTitles setting. where value for 'type' could be any from following list: "text", "checkbox", "multiline", "select" 'required' - boolean flag determines if form field is required or not. If field is required, them upload would not start until field is filled with correct value. 'description' - description text displayed right above form field. values - is a semicolon separated list of possible values for a select input field. It could be omited for other input types Example: ProductName:text:true:Name of product,ProductType:select:True:Product type:phone;tablet;notebook,Released:checkbox:false:Is product released In this example 3 form fields will be rendered . Required text field with label 'Name of product', required Combo box with label 'Product type' and list of possible values (phone;tablet;notebook) and not required checkbox with label 'Is product released' Note: It is recommended to use names for form fields from list of titles defined in AvailableDetailsTitles setting. It will allow to manually add the same metadata to files in details window. | ""
SilverlightUploaderTempFolder | Silverlight Uploader temporary folder. It is used to store temporary file then users upload files via Silverlight uploader. When the parameter is blank, the common TemporaryFolder is used. When the parameter is "Current", the current folder (that is the folder where the file is being uploaded) is used. | ""

## MS Office/Openoffice/LibreOffice support, Online Documents viewers and Image editor

HTTP Commander has plenty of possibilities to view and edit documents and edit images. Users can create documents, edit them and add metadata. It supports lock/unlock functions designed to restrict simultaneous access to a document.

HTTP Commander supports Microsoft Office and free Openoffice, LibreOffice for online editing of documents using desktop applications. Users do not need to bother with downloading documents to the local machine, editing, and uploading them back to the server. They can open the document right in HTTP Commander, edit, and save it, as they normally do with local documents. Thanks to WebDAV technology, users should not care about the difference between local documents and documents in HTTP Commander. Microsoft Office and free OpenOffice, LibreOffice allow the user to work with more than 100 document formats (text, tables, images, presentations). It is possible to convert one format to another and save new documents on the server. This feature works in any browser and with both Windows and Mac OS. Office XP, 2003, 2007, 2010, 2013, 2016 are supported (Office 2000 not supported).

### Using online services to work with documents

Only a web browser is required to work with documents via online services. No other application is needed on the client machine, that is you do not need MS Office or OpenOffice installed on your machine to work with documents.

- Google Docs Viewer is a free service. It allows the user to view most popular document formats. Users are able to open a document for editing in a separate window of Google Doc or Zoho services.
- Microsoft Office Web Apps is a free viewer service to preview most popular document formats in browser.
- Box viewer is a free service to view most popular office document formats (and many others) in browser. About Box viewer.
- Autodesk viewer is a free service which allow preview popular Autodesk file formats right in browser. About Autodesk 360 viewer.
- Google Drive edit feature allow user to edit office documents online Users do not need to bother with downloading documents to google drive, editing, and uploading them back to the Http Commander server. They can open the document right in HTTP Commander, edit it in Google Drive, and save it, modified document will be automatically transferred back to Http COmmander.
  End user should have account in Google and should authorize application to access his account.
  Integration with Google Drive should be configured in order to use this feature. For more info see How to configure integration with Google Drive.
- Edit in MS Office online / Office 365. This feature allow user to edit office documents online in Microsoft Office online/Office 365 services. It works in the same way as Edit in Google Drive feature, but Microsoft services used and appropriate account is required to use this feature.
  Integration with Microsoft One Drive / Office for Business should be configured in order to use this feature. For more info see How to configure integration with Microsoft One Drive, How to configure integration with Microsoft Office For Business.
- Edit/view in ONLYOFFICE. This feature allow users to edit office documents (MS Office, OpenOffice) in ONLYOFFICE Editor with support co-editin, chat, comments, review.
  See parameters EnableONLYOFFICEDocumentsEditor, ONLYOFFICEFileTypes, ONLYOFFICEDocumentServerUrl.
- Zoho Editor service allows the editing documents with lots of possibilities. Zoho Editor has free ("We provide a free version with some limitations that may be suitable for your requirements. This is primarily aimed at partners who do not charge a fee for their service and who anticipate a lower volume of usage. " ©Zoho.com site) and commercial versions. You need to obtain a Zoho API key to use the service. See Zoho Office API Pricing.
  See parameter EnableZohoDocumentsEditor.
- Pixlr Editor service allows the user to edit and create jpg, png, gif, bmp, psd and pxd files. This is an absolutely free flash-based editor with a great number of functionalities for work with graphics and photos. Pixlr allows the user to import images from such services as Picasa, Flickr.com, Facebook and it also has its own file storage and file sharing service. Pixlr is able to make screenshots and upload them using additional modules for Firefox or Chrome browsers.
  See parameter EnablePixlrEditor.
- Adobe Creative Cloud Online Image Editor. The Creative SDK Image Editing component allows the user to edit jpg, png, bmp, gif files. The component is optimized for the latest versions of Chrome, Firefox, Safari, and Internet Explorer (IE9).
  See parameter EnableAdobeOnlineImageEditor.

Configure HTTP Commander to work with documents in online services

- To work with documents in online services, such as Google Viewer, ONLYOFFICE, Zoho Editor, Pixlr Editor, Adobe Creative Cloud Online Image Editor (Aviary), you need to configure IIS anonymous access to HTCOMNET/Handlers/AnonymousDownload.ashx file. See How to grant the anonymous access to AnonymousDownload.ashx.
- Notes
  - Google Viewer, Zoho Editor, Adobe Image Editor and Pixlr Editor demand that your server (domain) be public, i.e. accessible from Internet for Google and Zoho services.
    For example: "http://www.mysite.edu/htcomnet/" - correct, "http://217.15.23.14/htcomnet/" - correct if IP 217.15.23.14 is global, "http://localhost/htcomnet/" - incorrect, "http://intranetserver/htcomnet/" - incorrect. Google Docs upload/download functionalities do not have this limitation and work even in an Intranet.
  - For using Zoho Editor over https connection (SSL) required enable SSL for HTTP Commander (see FAQ: How can I use HTTP Commander with SSL?) with certificate that is signed by a valid certification authority (CA). See Zoho API - SSL Support.
  - The Flash movie used in Pixlr needs crossdomain.xml file in the root of your website! Copy the crossdomain.xml file in the application root into the root of your website. For example,
    http://www.yoursite.com/crossdomain.xml - correct, http://www.yoursite.com/htcomnet/crossdomain.xml - incorrect). Make sure that the file is accessible from outside without authentication.

Key | Description | Default value
EnableGoogleDocumentsViewer | The key defines if users are allowed to use Google Doc online viewer to view some kinds of files. Google docs supports the following types: pdf, doc, docx, ppt, pptx, tif, tiff, xls, xlsx, pages, ai, psd, svg, eps, ps, xps, ttf, zip, rar, dxf, txt, css, html, htm, php, c, cpp, h, hpp, js. Users can save a document to their own Google Docs accounts and then edit it. If you set EnableUploadFromGoogle option to true, a user can upload a modified file back to HTTP Commander folder. This feature also works in Mobile Interface view (for Smartphones) There is also automatic edit in Google Drive feature. More info at EnableGoogleDriveEditor. | true
EnableAutodeskViewer | The key defines if users are allowed to use Autodesk online viewer to view some kinds of CAD files. See A360 Viewer. See also AutodeskViewerFileTypes parameter and other parameters withAutodesk in name. Note 1. For using this feature please make sure that the Update KB2468871 to .NET Framework 4 is installed, and if not, install it on the server with HTTP Commander (update details info: KB2468871). Note 2. The Autodesk viewer requires a WebGL canvas compatible browser, such as: Chrome 18.0+ Opera 15.0+ Firefox 4.0+ Internet Explorer 11 See Autodesk Viewer Requirements. | true
EnableShareCadViewer | The key defines if users are allowed to use ShareCad online viewer to view some kinds of files. See Free online CAD Viewer. See also hidden ShareCadViewerUrl, ShareCadViewerFileTypes parameters. | true
EnableOWADocumentsViewer | The key defines if users are allowed to use Microsoft Office Web Apps online viewer to view some kinds of files. Microsoft Office Web Viewer supports the following types: doc, docx, docm, dotm, dotx, xlsx, xlsb, xls, xlsm, pptx, ppsx, ppt, pps, pptm, potm, ppam, potx, ppsm. Word and PowerPoint documents must be less than 10 megabytes; Excel must be less than 5 megabytes. Also for IE browsers, add to Trusted Sites: http://*.officeapps.live.com http://*.cdn.office.net http://*.office.microsoft.com You can get more info at the View Office documents online | true
EnableONLYOFFICEDocumentsEditor | The key defines if ONLYOFFICE online Editor may edit some kinds of documents (MS Office, OpenOffice). ONLYOFFICE support co-editing, char, comments. To use this feature, you must have the ONLYOFFICE Document Server installed on your intranet. See the detailed guide to learn how to install ONLYOFFICE Document Server for Windows. After install and configure Document Server, change the value of the parameter ONLYOFFICEDocumentServerUrl. (also see parameter ONLYOFFICESecretKey). See also parameter ONLYOFFICEFileTypes to change the list of file types for editing, co-editing, viewing, reviewing with ONLYOFFICE, and ONLYOFFICE Help Center. | false
EnableBoxDocumentsViewer | The key defines if users are allowed to use Box View online viewer to view some kinds of files. Box View service supports many file types. See also parameters: BoxDocumentsViewerAppToken, BoxDocumentsViewerFileTypes. You can get more info at the Getting Started with the New Box View | true
EnableCloudConvert | The key defines if users can convert files using CloudConvert service. For more info see: https://cloudconvert.com/. See also parameters: CloudConvertAPIKey, CloudConvertConvertUrl, CloudConvertConversionTypesUrl | true
EnableZohoDocumentsEditor | The key defines if users allowed to use Zoho online Editor to edit some kinds of files. Supported file types. Some functionalities of Zoho Editor are not free. You need to get free of charge or buy Zoho API key and to set its parameters in Application settings: <ZohoEditorAPIKey value="PutZohoAPIKeyHere" /> If you use collaborative work with files, you can set the following parameter: <ZohoEditingMode value="collabedit " /> The parameter's values can be: view -- A document opens in read-only mode. normaledit -- A document opens only in edit mode for the user and no other collaborators are allowed. Default value. collabview -- A document opens in a collaborative view mode. Multiple users can view the content of the document at the same time and can leave notes/comments using the integrated chat service. However, they cannot edit the document content. collabedit -- A document opens in real-time collaborative edit mode. Multiple user can edit the document at the same time. You can get more info at the Zoho API web page | false
EnableGoogleDriveEditor | The key defines if users can create/edit files in Google Drive. This feature allows users to create and edit documents in Google Drive. Note. Also surely set value for GoogleClientId parameter. For more info see How to configure integration with Google Drive. See also GoogleDriveEditorFileTypes parameter. | true
EnableMsOfficeOnlineEditor | The key defines if users can create and edit documents in MS Office Online. Note 1. Also surely set value for LiveConnectAppClientID parameter. Note 2. Also make sure that NewFileTemplates folder contains files with .docx, .xlsx, .pptx (need for create new documents in MS Office Online) For more info see How to configure integration with Microsoft OneDrive. See also MsOfficeOnlineEditorFileTypes parameter. | true
EnableOffice365Editor | The key defines if users can edit documents in MS Office 365. Attention! To use this feature you must configure access OneDrive for Business. Note 1 See also parameters: OneDriveForBusinessRootUrl, OneDriveForBusinessOAuth2Endpoint, OneDriveForBusinessAppClientID, OneDriveForBusinessAppKey, MsOfficeOnlineEditorFileTypes. Note 2. Also make sure that NewFileTemplates folder contains files with .docx, .xlsx, .pptx (need for create new documents in Office 365). | true
EnablePixlrEditor | The key defines if users can edit image files or create new via Pixlr.com service. See also PixlrEditorFileTypes and UseGETMethodWhenSavingPixlrImages parameters. | true
EnableAdobeOnlineImageEditor | The key defines if users can edit image files via Adobe Creative Cloud service (Aviary). See also parameter AdobeOnlineImageEditorFileTypes. | true
EnableDjVuViewer | The key defines if users can view DjVu files (.djvu and .djv). | true
EnableEBookReader | The key defines if users can read e-Book files (.epub). | true

### Using MS Office and OpenOffice to work with documents

Configure HTTP Commander to work with Microsoft Office and OpenOffice

- Configure Web folder mapping.
- Note! MS Office does not work with Basic authentication without SSL. If you can't setup SSL (even free self signed SSL), you should ask users to run registry-fix which allows Office to work with Basic authentication without SSL. Read Microsoft KB 212363 article.
  How to apply the fix:
  - Vista, Windows 7,8,8.1,10 users can download this file and run BasicAuthVista7Set.reg (to revert to default settings run BasicAuthVista7Remove.reg )
  - Windows XP and 2003 Server users can download this file and run BasicAuthXP2k3Set.reg (to revert to default settings run BasicAuthXP2k3Remove.reg )
  - Restart Windows

In addition to IIS settings, you need enable applications that will be available to users for editing documents.

Key | Description | Default value
EnableMSOfficeEdit | The key defines if users can open some files to edit (or view) with desktop Microsoft office application. If no modify permission, file will be open read-only, but if enabled AnonymousEditingOffice parameter - viewing and editing is not available. Note. If this feature is enabled, you can additionally control it on a folder level using the permission settings (WebDAV option). You can find a list of supported files types at the top of Scripts\Main.js file. To launch MS Office HTTP Commander using JavaScript (it works most Windows and Mac browsers). Related parameters: MS Office does not work with Basic authentication without SSL. If you do not want to set SSL for the entire application, you may use SSL only for edit functions in MS Office (if parameter UseMSOFBAwithMSOffice is disabled ("false" value)). You need to set the following parameter UseSSLForMSOffice (set value="true") It is easy to make a free self-signed SSL . In addition, your users may solve the problem with Basic authentication without SSL themselves: by correcting a particular key in register. Set the following parameter: ShowFixBasicAuthAlert value (set value="true") See also AnonymousEditingOffice and UseMSOFBAwithMSOffice keys. | true
EnableOpenOfficeEdit | The key defines if users can open some files to edit (or view) with free desktop OpenOffice application. If no modify permission, file will be open read-only, but if enabled AnonymousEditingOffice parameter - viewing and editing is not available. You can find a list of supported files types at the top of Scripts\Main.js file. Note. If this feature is enabled, you can additionally control it on a folder level using the permission settings (WebDAV option). | true
ShowFixBasicAuthAlert | Show window with information about registry fix which will allow to open documents in MS Office without SSL enabled on server and Basic authenticationused. Note ! Only applicable if UseMSOFBAwithMSOffice is disabled (value "false") or AnonymousEditingOffice is enabled (value "true") (or both parameters UseMSOFBAwithMSOffice and AnonymousEditingOffice is disabled). | true

#### Opening a document in Microsoft Office

- Right-click the MS Office document in the HTTP Commander file list.

- In the pop-up menu click "View, edit and sharing" > "Edit in MS Office".

  Screenshot

- First attempt is to use special URI scheme to automatically open document in associated desktop application.

  The scheme is supported in Microsoft Office 2010 Service Pack 2 and later, including the Microsoft Office 2013 for Windows and the Microsoft SharePoint 2013 products. It is also supported in Office for iPhone, Office for iPad, and Office for Mac 2011.

- If URI scheme is not registered in system, then MS-Office browser plugin will be used.

  If the MS Office plug-in is installed

  MS Office opens the selected document. You may see a warning before document opens.

- If the MS Office plug-in is not installed.

  "Edit in MS Office" window appears.

  Screenshot

#### Opening a document in OpenOffice

- Right-click the OpenOffice document in the HTTP Commander file list.

- In the pop-up menu click "View, edit and sharing" > "Edit in OpenOffice / LibreOffice".

  Screenshot

- "Edit in OpenOffice / LibreOffice" window appears.

  Screenshot

#### How to detect if the MS Office plug-in is installed?

MS Office plug-in is available only in particular browsers on particular OSs

- Internet Explorer on Windows

  - Open Tools > Manage Add-ons
  - Manage Add-ons window appears

  - Search for "SharePoint OpenDocuments class" in the list of All add-ons. Make sure it is enabled.

    Screenshot

- FireFox on Windows

  - Open Main menu > Add-ons > plugins

    Screenshot

  - Find Microsoft Office plug-in and make sure it is enabled.

- FireFox and Safari on OS X if Microsoft Office for Mac is installed.

## Web folders mapping

See Web folders mapping for instructions on configuring Web Folders.

Relevant Application settings:

Key | Description | Default value
EnableWebFoldersLinks | Set this parameter to true if you want to allow Web folders mapping support. Note. If this feature is enabled, you can additionally control it on a folder level using the permission settings (WebDAV option). | true
ShowSyncWithLocalFolderInfo | Show sync with local folder info in the context menu. You can see the file that users will see in menu here | true

## Public links

Public links allow the user to provide unauthenticated access to files and folders. For example, you may generate a public link to a file and sent it to your colleague by e-mail (with the ability to use/create a corporate style for the body of the letter). The colleague can download the file via this link, it does not need to logon to HTTP Commander, the link does not require authentication. Links to folders allow modifying the folder content if enabled by the owner. You may also protect a link with password (and demand it when creating links if RequirePasswordOnCreatePublicLink=true) or restrict access only to specific users if AllowedLimitAccessPublicLinksToSpecificUsers=true.

To configure HTTP Commander to use public links, configure anonymous access to AnonymousDownload.ashx.

Relevant Application settings:

Key | Description | Default value
EnablePublicLinkToFile | Key defines if users can make a public link to a file (at menu). | true
EnablePublicLinkToFolder | Key defines if users can make a public link to a folder (at menu). | true
PublicLinkDefaultValidPeriod | Public link default valid period, in days. It must be a whole number of days. Minimum period is 1 day. If the value of the setting PublicLinkMaximumAllowedValidityPeriod is > 0 and less than the value of this parameter, then used maximum allowed value instead (ie PublicLinkDefaultValidPeriod = PublicLinkMaximumAllowedValidityPeriod). | 730 (2 years)
PublicLinkMaximumAllowedValidityPeriod | Maximum allowed validity period for public links, in days. Minimum value is 0 day - no limit. See also PublicLinkDefaultValidPeriod. Note! In Admin Panel (on 'Anonymous folders' tab) no limits for maximum validity period. | 0 (no limit)
ExpandUploadFormWhenOpenPublicFolder | Automatically expand upload form when page for public folder is opened. Applicable only for public folders, which is configured to allow at least view the content and upload. | false
ShowFileMarkWhenExistsPublicLinks | To show (true) or hide (false) icon at the file/folder in list if there are public links to it. If this parameter is enabled, and also it is allowed to create public links (parameters EnablePublicLinkToFile, EnablePublicLinkToFolder and permissions to folder: AnonymousDownload, AnonymousUpload, AnonymousView), in case of existence of public links to the file/folder the icon near file name will be displayed. In case of a click on this icon the edit window of the public link, if there is one, or all list of public links created by the current user will open. | true
RequirePasswordOnCreatePublicLink | Determines wether password is required or not when public link is created. See also parameter AllowedLimitAccessPublicLinksToSpecificUsers. | false
ExpandSettingsWhenOpenCreatePublicLinkWindow | Determines whether advanced settings automatically expanded when the "Create public link" window is opened. If option RequirePasswordOnCreatePublicLink is enabled, advanced settings will be automatically expanded regardless of the value of this setting. | false
AllowSendPublicLinks | Enable sending Public Links via email. See also how to branding of e-mail for sending public links. | true
ShowPublicLinksForView | Comma-separated list of available preview options for file when public link is opened. Available values: empty (or Disabled) - file downloaded when link is opened. ViewInBrowser - link to file preview in browser if file type allows (see FileTypes.xml in root of HTTP Commander folder); ViewInGoogleDocs - link to file preview in Google Docs Viewer if file type allows and EnableGoogleDocumentsViewer=true; ViewInOWA - link to file preview in Microsoft Office Web Apps if file type allows and EnableOWADocumentsViewer=true. If value of this parameter is a single option, then appropriate action will be performed (or file will be downloaded if action is not supported for current file type) If several options are specified, then page will contain links to open file with appropriate services/actions (in case if link is not protected with password). | "ViewInBrowser, ViewInGoogleDocs, ViewInOWA"
PublicLinksViewType | Types of view public links. Available values: OnlyLongUrl - generate and view only long public url; OnlyShortUrl - view only short public url; BothLongAndShortUrls - generate and view both long and short public urls (default). Note! To create a short links Google URL Shortener service is used. If you set the OnlyShortUrl or BothLongAndShortUrls value, for short links also need to specify the correct values ​​for the parameters GoogleAPIKey and GoogleURLShortenerUrl. Also, if after the set is one of these values ​​in the window create public links the main UI no choice short links, check the Error Log for errors Google URL Shortener Service initialization (error message: APIKey. For use Google URL Shortener service please set a correct value for 'GoogleAPIKey' in settings). | "BothLongAndShortUrls"
PublicLinkLogoHeaderHtml | Key defines HTML code for top header on a public link (to file or folder) page. Set empty string to hide top header. This HTML layout will be added on page of password entry (if the public link is password protected), on a page with links for downloading/viewing file and on page with file list for and the public folder. Note! You can use logo image from the Images or Scripts folders, specifying url to them in a following way: ../Images/... or ../Scripts/... For example: insert the following HTML layout (bolded) around of <h3> tags: <div><a href='http://www.yoursite.com' target='_blank'><img alt='' style='cursor:pointer;' src='../Scripts/logolarge.png' width='194' height='33' /></a><h3>Welcome to the Web File Manager</h3></div> | "<h3>Welcome to the Web File Manager</h3>"
ShowPublicLinksItemInTree | Determines whether the item 'Shared by link' (for view public links) is displayed in the tree. This setting is only applicable if EnablePublicLinkToFile or EnablePublicLinkToFolder is enabled. See also enumeration value ViewPublicLinks in the parameters ToolbarButtons1, ToolbarButtons2. | true
AllowSharedForYou | Determines whether the item 'Shared for you' is displayed in the tree. If enabled, in this item users will find public links created for them, and public links they have previously opened. This setting is only applicable if EnablePublicLinkToFile or EnablePublicLinkToFolder is enabled. Note! If parameter AllowedLimitAccessPublicLinksToSpecificUsers=false, then users will see only previously opened public links in 'Shared for you' item. | true
AllowedLimitAccessPublicLinksToSpecificUsers | Allowed or not to restrict access to the public links to specific users. If this option is enabled (true value), then in the window of creating a public link will be available a field to specify the names and e-mail of existing users, who will be able to use the link. When user open such a link he will be prompted to enter his login and password to access content. Note! This setting is applies only if RequirePasswordOnCreatePublicLink=false. | true
Advanced parameters for Public Links (hidden by default)
PublicLinkDefaultLifeTimeForView | Public link default life time for view, in minutes. It must be a whole number of minutes. Minimum period is 1 minute. Used for public links creates for view in Google Docs, Office Web Apps, Edit in ONLYOFFICE, Edit in Zoho, Edit in Adobe Images Editor, Create/Edit in Pixlr, etc.. | 15
ImpersonateOwnerWhenViewingPublicFolder | As possible to impersonate the owner when viewing public network folders. This is applicable only for Basic Authentication at IIS (Windows and Forms with Windows user authentication at HTTP Commander). This option can be used in case of active ABE, so that other users who view the folder and could not see the inaccessible folder owner. Note! If you have public folder links are created by using this option when migrating to another server (or reinstall the current) impersonation will fail. In this case, each user must remove these links and recreate it or use 'Show link' button for these links. | false
ShowExpirationDateForPublicLink | Show expiration date on the public links page. | true

## Mobile user interface

These parameters affects only mobile user interface based on Sencha Touch framework. Simple Mobile UI based on JQuery Mobile is not configurable.

Key | Description | Default value
MobileIconSet | Configuration of icon set for mobile web interface. Set true to use built into mobile ui native icons (better feets to native mobile OS interface). Set to false to use the same icons as in standard web UI (configured with IconSetPath setting). | true
MobileItemsPerPage | By default in the mobile web ui paging ('infinite scroll') is enabled, the next page of content will load automatically when the user scrolls to the bottom of the list. This parameter determine maximum number of items per page in mobile web interface. If value of this parameter is set to 0, all items are displayed on one page (no paging). If > 0, then the list of items is splitted into pages. Each page contains at most MobileItemsPerPage items. It is not recommended to set the large value for this parameter, because it may cause problems with performance on some of mobile devices and will increase the time of loading data from server. | 50
MobileShowCloudStorages | Determines whether 'Cloud storages' folder should be displayed at the root folder in the mobile interface. This setting does not affect the upload to cloud storgaes functionality in the share menu. | true
MobileShowExistingShares | Determines whether 'Existing shares' folder should be displayed at the root folder in the mobile interface. This item provides faster access to the list of all public shares created by the logged in user. | true
MobileShowFavorites | Determines whether 'Favorites' folder should be displayed at the root folder in the mobile interface. This item provides faster access to the list of users favorites folders. User may add folders to this list using appropriate button on the toolbar while navigating through folder structure. Favorites stored in user's cookies, therefore they are different for different browsers. | true
MobileToolbarButtons1 | Visible buttons in the file view (with common actions) toolbar. You can hide some of the buttons or their view by modifying this key. The value Separator can be repeated several times, but not in a row. It is possible to specify the display method of the button by inserting a colon after the name - View:noicon, New:icononly. | "View,New,UploadMenu,Separator,AddToFav,MultiSelect,Search"
MobileToolbarButtons2 | Visible buttons in the second (file) toolbar. This toolbar used to display actions related to selected files/folder. It automatically hides, when there is no selected items, and clipboard is empty. You can hide some of the buttons or their view by modifying this key. The value Separator can be repeated several times, but not in a row. It is possible to specify the display method of the button by inserting a colon after the name - View:noicon, New:icononly. | "ViewEdit:icononly,Download:icononly,Separator,Copy:icononly,Cut:icononly,Paste:icononly,Delete:icononly,Rename:icononly,Separator,Share:icononly,ZipMenu:icononly,WatchForModifs:icononly,Label:icononly,Details:icononly"
MobileToolTipsEnabled | Determines whether some usefull hints about mobile web interfcae should be displayed for end users. Each hint displayed only once. Information about displayed hints is stored in local storage of user's browser. Therefore hints will be displayed again if user will clear browser data. If you feel that these hints will annoy your users, you can disable them by setting to false the value of this parameter. | true

## Settings of the Trash

This section allows you to enable and configure the users to delete files and folders to the Trash

Key | Description | Default value
EnableTrash | Defines if users are allowed to delete files/folder to a personal Trash. If enabled, in the main interface at the folder tree will be available an additional item to access the Trash. Note! You can also add 'Trash' item to the toolbar (see ToolbarButtons1, ToolbarButtons2). This item display connext menu with Trash control item(Empty Trash, Restore, etc..). Note! Removing to the Trash is NOT supported by the WebDAV. Note! You can also add 'Trash' item to the toolbar (see ToolbarButtons1, ToolbarButtons2). This item display connext menu with Trash control item(Empty Trash, Restore, etc.). Note! Removing to the Trash is NOT supported by the WebDAV. | true
UsersTrashFolder | Physical path to the trash folder where all files/folders deleted by users will be stored. This applies if you enabled EnableTrash parameter. Note! Files and folders deleted by users are moved to this folder with unique names, into subfolder with username. Attention! If EnableTrash=true and this path to folder is not specified, or if no NTFS permissions to read and write on this folder, then error will occurs when user will try to delete files or folders. Read/write NTFS permissions on that folder must be configured for Application pool identity and for all users . See Set NTFS permissions section. | "C:\htcomtrash"
UsersTrashAbilityDeleteDirectly | Determines if users will have a choice on how to delete files and folders - to the Trash or directly. If an option to delete directly is allowed, then in a deleting confirmation dialog, checkbox "Delete directly, without moving to the Trash" is displayed. Possible values : ProvideChoiceWithDefaultIntoTrash - (default) "Delete directly, without moving to the Trash" chebox is unchecked by default, i.e. files/folder will be moved to the Trash. ProvideChoiceWithDefaultDirectly - "Delete directly, without moving to the Trash" chebox is checked by default, i.e. files/folder deleted directly by default. DisableDeleteDirectly, then permanent deletion is forbidden and checkbox isn't displayed. Files/folders always moved to the Trash. This applies if you enabled EnableTrash parameter. | "ProvideChoiceWithDefaultIntoTrash"
Automatic cleaning settings and Trash restrictions
If Trash is enabled (EnableTrash) and the value of the UsersTrashFolderCleanupInterval setting is > 0, then HTTP Commander will perform Trash cleanup for each user every UsersTrashFolderCleanupInterval seconds, in accordance with the following rules: Each item (file or folder) in the user's Trash, larger than UsersTrashLargeItemsSize megabytes (if > 0) is destroyed, if its shelf life from the date of the removal is more than UsersTrashLargeItemsShelfTime days. Each item (file or folder) in the user's Trash, is destroyed, if its shelf life from the date of the removal is more than UsersTrashSmallItemsShelfTime days. At the same time, if in the process of cleaning the user's Trash, it turns out that it exceeded the size (UsersTrashMaxSize megabytes, only if > 0), then all the other items are destroyed without the checks described above.
UsersTrashFolderCleanupInterval | How often should be performed the cleanup procedure of the user's trash folders from the old and large files (interval in seconds). Note! If this parameter is set to 0 or Trash feature is disabled (EnableTrash=false), the automatic cleaning of the trash is not performed! It is not recommended to specify a value of 0 for this parameter. If you are sure, then do not forget to perform cleanup manually. See Automatic cleaning settings and Trash restrictions description. | 600 (10 min)
UsersTrashLargeItemsSize | The size of large items (files, folders) in Trash: the minimum size (in megabytes) of the items in the Trash, which will be cleaned after UsersTrashLargeItemsShelfTime days. See Automatic cleaning settings and Trash restrictions description. | 10 Mb
UsersTrashLargeItemsShelfTime | The shelf life of large items in the Trash (in days). See Automatic cleaning settings and Trash restrictions description. | 7 (1 week)
UsersTrashSmallItemsShelfTime | The shelf life of small items in the Trash (in days). See Automatic cleaning settings and restrictions Trash description. | 30 (1 month)
UsersTrashMaxSize | The maximum size of the Trash folder for each user (in megabytes). See Automatic cleaning settings and restrictions Trash description. | 1024 (1 Gb)

## Novell EDirectory integration

You can integrate HTTP Commander with Novell EDirectory. So existing EDirectory users can authenticate and you don't need to create the same user at HTTP Commander database. See Novell eDirectory integration.

Key | Description | Default value
EDirectory | Set this parameter to true if you want to use Edirectory integration. For more info see FAQ | false
EDirectoryBindUserDN | Distinguished Name of the eDirectory user, that HTTP Commander will use to connect to Novell eDirectory server to read user and group objects. | ""
EDirectoryBindUserPassword | Password of eDirectory user, that HTTP Commander will use to connect to Novell eDirectory server to read user and group objects. | ""

## Advanced parameters (hidden by default)

These parameters designed for application internal needs or for some customers for very rare needs. In most cases you don't need to modify such parameters and you should edit this only after Element-IT support approval. By default these parameters are hidden at Admin panel but you can show them by clicking "Show advanced parameters" button in the toolbar.

Key | Description | Default value
AnonymousUserName | The name of the anonymous user in a case if anonymous access is allowed. | "Anonymous"
AllowedFoldersPaths | The key defines allowed root paths which administrator can share at the Admin Panel. Paths are comma separated. Empty value by default — administrator can share any folders. You can set this value for more security (to prevent sharing if somebody will get administrator's credentials) or if you want to allow administrator sharing only specified folders. You can also set the parameter that defines how admin can select folder: ListAllowedFoldersPaths=1 Value 0 means that admin should type path in text box, Value 1 - Administrator will see dropdown menu with root folders and subfolders, Value 2 - Administrator will see dropdown menu with root folders, their subfolders and all level subfolders. | ""
AutoReadAssignShares | Allow automatically detect shared and DFS folders and add them to the list of folders that are available to users. Specify a method of detecting shared and DFS folders. Possible values: 0 - do not detect folders; 1 - use ActiveDirectory Searcher to detect folders; 2 - use WinAPI functions to detect folders; 3 - use both methods (1 and 2) to detect folders. | 0
DefaultAllowedAccessControl | Default rights that are assigned when an administrator creates a new folder or adds a new user/group. The property contains a list of comma-separated rights. | "create, del, rename, upload, download, zipDownload, zip, unzip, cut, copy, listFiles, listFolders, modify, anonymDownload, anonymUpload, anonymViewContent, watchForModifs, webdav"
GoogleAnalyticsWebPropertyID | Google Analytics ID. HTTP Commander supports Google Analytics to provide your application visitors statistics. You can register at Google Analytics site and get new ID. Example: UA-12345678-9. Set for this parameter empty string (default value) for disable Google Analytics. Note: HttpCommander will provide only statistic for users login. Each time when user logs into Http Commander , LoginUsers variable with value of name of logged in user will be transferred to Google Analytics. No other data collected. | ""
EnableLiveSupport | Enable/disable Live Support button in AdminPanel, Diagnostics and Manual pages. | true
IdentifierWebDav | A virtual folder in HTTP Commander's root folder for WebDAV requests. If the web folder manager is published under http://www.yourcompany.com/htcomnet/, then the following URL identifies WebDAV's root folder: http://www.yourcompany.com/htcomnet/hcwebdav/. HTTP Commander intercepts all HTTP(S) requests for that folder and processes them according to WebDAV protocol. If you have a physical folder with the same name in the application's root folder, its content will not be accessible via HTTP protocol. Presence of the identically named physical folder in no way affects correct functioning of WebDAV feature in HTTP Commander. Normally you should not change this parameter. Make sure, however, that HTTP Commander URL does not contain segments matching the value of this parameter (string comparison is case-insensitive). For example, if you've published the application under http://www.yourcompany.com/hcwebdav/HttpCommander/, you need to change the value of IdentifierWebDav parameter, otherwise WebDAV feature will not function. You may also decide to change the value of this parameter for aesthetic reasons. Restrictions on the value of this parameter The parameter should not contain slash and backslash characters. It is recommended to limit the range of used characters to latin letters, digits and characters '_', '-'. Note ! If you renamed value of this parameter (or updated from older version), then add (or check) to Web.config file before the opening tag <system.webServer> next lines:
    <location path="your_webdav_identifier">
        <system.web>
            <authorization>
                <allow users="*" />
            </authorization>
        </system.web>
    </location>
It is surely recommended to read article Web folders | "hcwebdav"
HideFilesStartingWithDot | Set true for hide files/folders with name beginning with a dot. Security note. | false
ListAllowedFoldersPaths | Method of display of the list of the allowed root paths. See AllowedFoldersPaths key. Possible values: 0 - the drop down list of allowed root paths isn't displayed; 1(10) - the drop down list with folders and one level subfolders from the allowed list is displayed (10 - in this case in the selection list relative paths will be displayed); 2(20) - the drop down list with folders, subfolders and all level subfolders from the allowed list is displayed. Value 20 is similar 10. | 0
MakeReadOnlyFileWhileLocked | Set true to change file attributes as read-only when the file is locked by WebDAV clients (MS Office, OpenOffice, LibreOffice, etc.). | false
MaxSizeFilesForZip | The maximum size of archivable files (in bytes). If the summary size of archivable files exceeds the preset value, the archive won't be created and the error message will be deduced. If value is less or equally 0, restrictions on the size of archivable files are absent. | 0
ZipFilesWithoutCompressionExtensions | List of extensions of files to zip without compression (make sure to put a dot at the beginning of each extension). For an exception of files without extensions add in the list a dot. | ".zip,.rar,.arj,.7z,.ace,.cab,.exe,.com,.dll,.msi,.iso,.avi,.vob,.mpg,.wmv,.mp4,.wma,.mp3,.wav,.ogg,.gif,.jpg,.jpeg,.png,.tif,.tiff"
TemporaryFileLifeInterval | Remove temporary files if they are not used for specified period of time. The time period is specified in seconds. | 600
Send401AtNonIEWinAuthLogout | To send or not the answer with HTTP status code 401 at logout for browsers distinct from IE. | false
VirtualHttpCommanderPath | A virtual path of the HTTP Commander root directory. It may be either absolute or relative URL. Absolute URL. For example, "http://myserver.com/app1/HttpCommander" or "https://myserver.com/app1/HttpCommander". Relative URL. The URL of the web application root directory containing HTTP Commander root directory plays the role of base URL. For example, "http://myserver.com/app1" is URL of the web application (IIS terminology) and HTTP Commander root folder is located in ElementIt/HttpCommander subfolder of the web application root folder, then the virtual path should be "~/ElementIt/HttpCommander". The absolute URL of the HTTP Commander root directory is "http://myserver.com/app1/ElementIt/HttpCommander". If value isn't specified, then the HTTP Commander root folder matches web application folder, it is detected automatically (by default). Attention! It isn't recommended to specify any not empty value. Specifying of this parameter can be necessary if Proxy or redirection in IIS is used. | ""
AllowSetReadOnlyAttribute | Allows or forbids the user to change a read-only attribute in Details menu of a file. | false
ShowAdminPanelCustomFields | Show (true) or hide (false) custom fields in Admin Panel's forms. If enabled, in folder, user and group edit window (at Admin Panel) additional text input will be rendered to store custom information. Custom fields are only for custom features to store some extra data (For developers). | false
ResumableDownload | Set true to enable resumable download of files. | true
AnonymousEditingOffice | Set true to edit Microsoft and Open Office files without authentication prompt. When you open an office document in HTTP Commander, Microsoft Office and Open Office shows an authentication dialog. You have to enter valid credentials to view and edit the document. AnonymousEditingOffice option allows you to suppress the authentication dialog, the document will be opened without request for credentials. Note that HTTP Commander uses identity of the application pool to access the file. Such approach works correctly in the following authentication modes: Forms, Novell EDirectory. AnonymousEditingOffice option will not work correctly in other authentication modes. Windows and Forms with Windows Users modes impersonate the current user, that is not the case in anonymous editing. If this parameter is enabled, links for mapping web folders have a suffix "0", and for anonymous editing in office - "1". See Web Folders acticle. Note! If this parameter is enabled (value "true"), the parameter UseMSOFBAwithMSOffice is ignored even if enabled. | false
UseMSOFBAwithMSOffice | Set true to enable support of Office Form Based Authentication in Microsoft Office. It allow to store authentication on client for 3 days and allow to edit files even without SSL. Note 1! If this parameter is disabled (value "false"), than used AnonymousEditingOffice (if enabled) or Basic authentication. Note 2! This applies only if parameter AnonymousEditingOffice is disabled. Attention! Microsoft Office Form Based Authentication work with Microsoft Office version 2007 SP1 and later. If you use Office 2007 without SP or 2003 please upgrade Microsoft Office or disable this parameter (value "false") to use basic authentication. See also advanced parameters (hidden by default) MSOFBAloginPageBackgroundImage and MSOFBAloginPageCaption. | true
SkyDriveWebDAVRootUrl | Microsoft OneDrive WebDAV service root url (need for work with OneDrive). If in case of login in OneDrive there is an HTTP error 501, try to change this parameter, for example having specified https://c.docs.live.net value. | "https://d.docs.live.net"
BasicAuthenticationRealm | Basic authentication realm. This parameter is used to implement logout function in Windows version of Http Commander. This parameter applies to the following Http Commander authentication modes: "Windows". See How to clear windows authentication on Log out for more information. | ""
EnableAutoLoadGPOLDrives | Automatically load folders from Group Policy. | false
PathToFileWithGPOLDrives | Path to file with Group Policy Drives. If empty, the current domain policy is used. | ""
ImportGPOLDriveFiltersToPermission | Import filters of Group Policy Mapped Drives to folder Permission, else import to filter field. | false
GPOLDrivesImportPeriod | Group Policy import drives period, in days. Minimum period is 1 day. | 1
EnableOpenSWFinBrowserWhenDownloading | To open swf files in the browser when downloading. | false
AntivirusScannerPath | Full absolute path to an executable file of — the Antivirus Scanner. If the value isn't set, virus checking is not performed. Example: c:\Program Files\Bitdefender\bdc.exe Also in addition for viewing results of scanning files, add "AntivirusScanning" event for the LogEvents parameter. | ""
AntivirusScannerArgs | Arguments for running the Antivirus scanner. If the value isn't set, the Antivirus scanner will be invoked with a single argument — the path to the file to be checked. To refer to the file to be checked, use the %1 template in the parameter value. The template will be replaced with the path to the file or folder being checked enclosed in double quotes. For example, the parameter may be: /log=bdcscan.log /fixed /del %1 Provided the target file is d:\test.exe, the Antivirus scanner will be invoked with the following arguments: /log=bdcsan.log /fixed /del "d:\test.exe" If the value is not blank and does not contain the %1 template, the path of the target file in double quotes will be appended to the value. | ""
AntivirusScannerLaunchEvents | Key defines list of events that Antivirus Scanner started. Set empty value for enable all events. | "Upload, Modify"
LiveConnectAppClientID | Microsoft Converged application ID. This value need for EnableMsOfficeOnlineEditor, EnableDownloadToSkyDrive, EnableUploadFromSkyDrive. For more info see Integration with Microsoft OneDrive. | ""
OneDriveForBusinessRootUrl | Root URL to access OneDrive for Business. This url has the form https://<your-company-name>-my.sharepoint.com. This parameter is required if you want to use integration with OneDrive for Business (create/edit documents, upload/download files, folders). See info OneDrive for Business, What is OneDrive for Business?, OneDrive for Business integration. | ""
OneDriveForBusinessOAuth2Endpoint | Endpoint at which HTTP Commander can obtain an authorization token using OAuth 2.0 for access to OneDrive for Business. For this parameter recommended to specify url including your tenant id, which can be copied from OAUTH 2.0 AUTHORIZATION ENDPOINT properties of registered application from the Azure AD Management Portal Application management page. For more info see OAuth 2 documentation. Also see common info OneDrive for Business, What is OneDrive for Business?, OneDrive for Business integration. | "https://login.microsoftonline.com/common/oauth2/authorize"
OneDriveForBusinessAppClientID | Client ID of registered application on the portal Windows Azure in Active Directory section (for access to OneDrive for Business). The unique identifier for your HTTP Commander application registered on the portal Windows Azure in Active Directory section. You will need to use this for access HTTP Commander to files in OneDrive. This parameter is required if you want to use integration with OneDrive for Business (create/edit documents, upload/download files, folders). For more info see Register a new application in Active Directory section in the Azure Management Portal. Also see common info OneDrive for Business, What is OneDrive for Business?, OneDrive for Business integration. | ""
OneDriveForBusinessAppKey | Application Key Value from the Azure AD Management Portal Application management page. This should have been recorded from the previous step to create a key – note this is not retrievable. If you forgot or lost the previous key, create another under the same application. This parameter is required if you want to use integration with OneDrive for Business (create/edit documents, upload/download files, folders). See more info. Also see common info OneDrive for Business, What is OneDrive for Business?, OneDrive for Business integration. | ""
GoogleAPIKey | Google Public API Key for server applications. This key does not require any user action or consent, does not grant access to any account information, and is not used for authorization. This parameter used with Google Url Shortener Service for public links (See PublicLinksViewType, GoogleURLShortenerUrl parameters). | Element-IT Google API Key for server applications
GoogleClientId | Google Client ID for web application. This value needs for EnableUploadFromGoogle, EnableDownloadToGoogle, EnableGoogleDriveEditor. For more info see How to configure integration with Google Drive. | ""
GoogleDocumentsViewerUrl | Google Documents Viewer service url with params. | "https://drive.google.com/viewerng/viewer?embedded=false&url="
GoogleDocumentsViewerEmbeddedUrl | Google Documents Viewer service url with params for embedded view (in frame). | "https://drive.google.com/viewerng/viewer?embedded=true&url="
GoogleDocumentsViewerFileTypes | List of file types supported by a Google Docs Viewer. See Google Drive Viewer supported file types. | "pdf,doc,docx,ppt,pptx,tif,tiff,xls,xlsx,pages,ai,psd,svg,eps,ps,xps,ttf,zip,rar,dxf,txt,css,html,htm,php,c,cpp,h,hpp,js,gdoc,gsheet,gslides,gdraw,gform,gmap"
GoogleDriveEditorFileTypes | List of file types supported by a Google Drive Editor. For more info see Google Docs editors help. See also EnableGoogleDriveEditor parameter. | "docx,doc,docm,xlsx,xls,xlsm,pptx,ppt,ppsx,pps,pptm,ppsm,odt,ods,odp,txt,rtf"
MsOfficeOnlineEditorFileTypes | List of file types supported by a MS Office Online and 365 Editor. For more info see Office Online File Support page. See also EnableMsOfficeOnlineEditor or EnableOffice365Editor parameter. Note! File extensions .doc, .xls, .ppt, .pps not supported for editing in MS Office 365 Editor, but for MS Office Online Editor converted to new formats (.docx, .xlsx, .pptx). | "docx,odt,docm,xlsx,xlsb,xlsm,ods,pptx,ppsx,odp,txt,doc,xls,ppt,pps"
GoogleDriveFileTypes | List of Google Drive file types (gdoc, gdraw, gform, gsheet, gslides, gmap). When clicking files with such extensions the window will be shown with link to the document, upon transition on which the editor of the documents Google Drive will open. You can also add other types of files which contents have an appearance: {"url": "link_to_file_for_open_in_google_drive"...} For this purpose: Add extension to this list. In FileTypes.xml file add to Properties/FileTypes section a format description. For example:
        <FileType>
            <Icon>gnewtype.png</Icon>
            <Icons>
                <Small>16/gnewtype.png</Small>
                <Normal>32/gnewtype.png</Normal>
                <Large>96/gnewtype.png</Large>
            </Icons>
            <Type>Google New Type</Type>
            <Extensions>
                <string>GNEWTYPE</string>
            </Extensions>
        </FileType>
And to folders Images/ext/16/, Images/ext/32/, Images/ext/96/ add appropriate icons. See Overview of Google Docs, Sheets, and Slides. | "gdoc,gdraw,gform,gsheet,gslides,gmap"
BoxDocumentsViewerAppToken | Box View App Token (Primary Access Token). This token need for view documents in Box View service. Leave empty for use Element IT Box View App Token. If you use your value for this parameter, then in Box Developers Console on create app select Custom App, then for Authentication Method - App Token (Server Authentication), and next, after creating app - generate and copy Primary Access Token in Configuration section (note that need enable Two Factor Authentication for your developer account and select 'No Expiry' for Primary Access Token): Screenshots For more info see Getting Started with the New Box View. See also parameters: EnableBoxDocumentsViewer, BoxDocumentsViewerFileTypes. | Box Element-IT HTTP Commander View App Token
BoxDocumentsViewerFileTypes | List of file types supported by a Box View service. If you use your Box View App Token, and your Box account has a Business level, then you can optionally specify video file extensions and 3D files. See What file types and fonts are supported by Box's Content Preview?. Also note that there are restrictions on the file size for viewing, uploading and other limitations. For more info see Getting Started with the New Box View. See also parameters: EnableBoxDocumentsViewer, BoxDocumentsViewerAppToken. | "as,as3,asm,bat,c,cc,cmake,cpp,cs,css,csv,cxx,diff,doc,docx,erb,gdoc,groovy,gsheet,h,haml,hh,htm,html,java,js,less,m,make,ml,mm,msg,ods,odt,pdf,php,pl,properties,py,rb,rtf,sass,scala,scm,script,sh,sml,sql,txt,vi,vim,wpd,xls,xlsm,xlsx,xml,xsd,xsl,yaml,odp,ppt,pptx,bmp,gif,jpeg,jpg,png,psd,svg,tif,tiff,dcm,dicm,dicom,svs,tga,aac,aifc,aiff,amr,au,flac,m4a,mp3,ogg,ra,wav,wma"
CloudConvertConvertUrl | CloudConvert convert url. See: https://cloudconvert.com/apiconsole. See also parameters: EnableCloudConvert, CloudConvertAPIKey, CloudConvertConversionTypesUrl. | "https://api.cloudconvert.com/convert"
CloudConvertConversionTypesUrl | CloudConvert conversion types url. See: https://cloudconvert.com/apidoc#types. See also CloudConvert - Conversion Types. See also parameters: EnableCloudConvert, CloudConvertAPIKey, CloudConvertConvertUrl. | "https://api.cloudconvert.com/conversiontypes"
OWADocumentsViewerUrl | Microsoft Office Web Apps online viewer service url with params. | "https://view.officeapps.live.com/op/view.aspx?src="
OWADocumentsViewerEmbeddedUrl | Microsoft Office Web Apps online viewer with params for embedded view (in frame). | "https://view.officeapps.live.com/op/embed.aspx?src="
OWADocumentsViewerFileTypes | List of file types supported by a Microsoft Office Web Apps online viewer. See Office Online File Support, View Office documents online. | "doc,dot,docx,docm,dotm,dotx,odt,xls,xlsx,xlsb,xlsm,ods,pptx,ppsx,ppt,pps,pptm,potm,ppam,pot,potx,ppsm,odp"
ONLYOFFICEDocumentServerUrl | The name (with protocol 'http' or 'https') of the server with the ONLYOFFICE Document Server. See the detailed guide to learn how to install ONLYOFFICE Document Server for Windows. (also see parameter ONLYOFFICESecretKey). Also you can, as a value, specify the full url to the ONLYOFFICE Document Server api.js file, i.e. http://documentserver/web-apps/apps/api/documents/api.js. This can be useful if you are using the ONLYOFFICE Document Server version prior to 4.0: then specify the value as http://documentserver/OfficeWeb/apps/api/documents/api.js. In other cases, just specify the server name with the protocol (i.e. http://documentserver). See ONLYOFFICE JavaScript API. See also parameters EnableONLYOFFICEDocumentsEditor, ONLYOFFICEFileTypes. | "" (empty string)
ONLYOFFICEFileTypes | List of file types supported by a ONLYOFFICE for editing and viewing. See supported formats of Documents, Spreadsheets and Presentations. See also parameters EnableONLYOFFICEDocumentsEditor, ONLYOFFICEDocumentServerUrl. Note! To edit (including co-edit), only the following list of extensions is available: doc, docx, odt, xls, xlsx, ods, pptx, ppt, ppsx, pps, odp and the files with the extensions doc, odt will be converted to the format docx; xls, ods - to xlsx; ppt, pps, ppsx, odp - to pptx. Attention! If you change the theme of the presentation when editing in ONLYOFFICE, then after saving, such a document can not be opened for viewing and editing on Google (but in all other applications it opens normally). | "doc,docx,odt,rtf,txt,pdf,html,htm,mht,epub,xps,djvu,xls,xlsx,ods,csv,pptx,ppt,pps,ppsx,odp"
ONLYOFFICESecretKey | The secret key for accessing the ONLYOFFICE Document Server. If you install ONLYOFFICE Document Server (parameter ONLYOFFICEDocumentServerUrl), and at the same time, access to it is configured for it (the secret key (services.CoAuthoring.secret.inbox.string) is set in the config and validation is enabled (services.CoAuthoring.token.enable.browser)), then for this parameter, specify the secret key value ​​from the server settings services.CoAuthoring.secret.inbox.string | "" (empty string)
DropboxConsumerKey | Dropbox Application key. See Integration with Dropbox. See also parameters EnableDownloadToDropbox, EnableUploadFromDropbox, MaxFileSizeForDownloadToDropboxEntirely. | ""
MaxFileSizeForDownloadToDropboxEntirely | Maximum file size for upload to Dropbox entirely (value in megabytes, in the range from 0 to 150 Mb). This value allows you to control how to upload to Dropbox files of different sizes (see EnableDownloadToDropbox). If this parameter is set to 0, all files, regardless of size, will be uploaded to Dropbox in chunk (see Dropbox API upload manual). If you specify a positive value, then large files with size more than this value will be loaded in chunk, and all the other entirely in a single request. If the file size is larger than 150 MB, it will always be loaded in chunk (see Dropbox API upload manual). See also parameters EnableDownloadToDropbox, DropboxConsumerKey. | 150
IconSetExt | Extension of icons in selected icon set. Note ! If you installed HTTP Commander in IIS6 and use .svg icons, make sure to set the MIME type for them. | ".svg"
IconSetPath | Path to folder (in 'Images' directory) with icons. Set the relative url in the 'Images' directory to folder with icons (for example '/' - for using .png icons in 'Images' folder). Note ! If you installed HTTP Commander in IIS6 and use .svg icons, make sure to set the MIME type for them. | "svg/"
ShowLinkToParentFolderInFileList | Show the link to the parent folder in the file list. At the same time, if you open a folder fails, the link to the parent directory will be displayed regardless of this setting. | true
GoogleURLShortenerUrl | Google URL Shortener API service url. See also parameters PublicLinksViewType and GoogleAPIKey. For more info see URL Shortener API Documentation. | "https://www.googleapis.com/urlshortener/v1/url"
DragNDropCountOfParallelUploadingFiles | Number of parallel uploading files for Drag & Drop uploader. See EnableDnDUploader parameter. | 5
UseGETMethodWhenSavingPixlrImages | If set to 'true', when you save images from Pixlr will be used request method GET, otherwise - POST. It is recommended to use when attempting to save GET request method (true value for this parameter). If the POST method is used, there may be problems with saving. For more details, please link Pixlr API Not Saving Changes. | true
PixlrEditorFileTypes | List of file types supported by a Pixlr Images Online Editor. See also EnablePixlrEditor and UseGETMethodWhenSavingPixlrImages parameters. | "jpg,jpeg,png,gif,bmp,psd,pxd"
AutodeskServiceUrl | Autodesk Viewer Service API URL. See Autodesk View and Data API. | "https://developer.api.autodesk.com/"
AutodeskViewerFileTypes | List of file types supported by the Autodesk online Viewer. See 2D and 3D formats supported by A360 Viewer. | "3dm,3ds,asm,cam360,catpart,catproduct,cgr,collaboration,dae,dgn,dlv3,dwf,dwfx,dwg,dwt,dxf,exp,f3d,fbx,g,gbxml,iam,idw,ifc,ige,iges,igs,ipt,jt,model,neu,nwc,nwd,obj,prt,rvt,sab,sat,session,skp,sldasm,sldprt,smb,smt,ste,step,stl,stla,stlb,stp,wire,x_b,x_t,xas,xpr"
AutodeskClientId | Autodesk Viewer Client ID parameter. For more info see Sing in and create Autodesk View and Data API application . | Autodesk Element-IT HTTP Commander Client ID
AutodeskClientSecret | Autodesk Viewer Client Secret parameter. For more info see Sing in and create Autodesk View and Data API application . | Autodesk Element-IT HTTP Commander Secret
ShareCadViewerUrl | ShareCad Viewer service url (with params). See ShareCad API. See also parameters EnableShareCadViewer, ShareCadViewerFileTypes parameters. | "https://sharecad.org/cadframe/load?url="
ShareCadViewerFileTypes | List of file types supported by the ShareCad Viewer. See Free online CAD Viewer. See also parameters EnableShareCadViewer, ShareCadViewerUrl parameters. | "dwg,dxf,dwf,hpgl,plt,cgm,pdf,svg,emf,wmf,step,stp,iges,igs,brep,stl,sat,png,bmp,jpg,gif,tiff,tga,cal"
AdobeClientId | Adobe Creative Cloud Client ID (API Key). Used for Adobe Creative Cloud Online Image Editor. See parameters EnableAdobeOnlineImageEditor and AdobeOnlineImageEditorFileTypes. For getting Adobe Client ID, follow the steps in our App Registration guide. | Adobe Creative Cloud Element-IT HTTP Commander API Key
AdobeOnlineImageEditorFileTypes | List of file types supported by a Adobe Creative Cloud Images Online Editor. Note! After editing an image, save the format can be either .png (for all types of files except jpg, jpeg, jpe, jfif), or jpg. See also Aviary's Online Vector Editor Supports Multiple File Types. see=See also=also EnableAdobeOnlineImageEditor and AdobeClientId parameters. | "jpg,jpeg,jpe,jfif,png,bmp,dib,gif,svg"
BoxClientId | Box OAuth2 Client ID parameter. See OAuth2 section on edit page in Box Applications Console. If you use your value for this parameter, then in Box Applications Console in OAuth2 Parameters section for redirect_url set empty value or set url https://yourdomain.com/HTCOMNET/Handlers/BoxOAuth2Handler.ashx. For more info see Box OAuth 2.0 Documentation. Note 1! Be sure to use an SSL connection to HTTP Commander (see FAQ: How can I use HTTP Commander with SSL?). Note 2! For using this feature please make sure whether the Update KB2468871 to .NET Framework 4 is installed, and if not, install it on the server with HTTP Commander (update details info: KB2468871). | Box Element-IT HTTP Commander Client ID
BoxClientSecret | Box OAuth2 Client Secret parameter. See OAuth2 section on edit page in Box Applications Console. If you use your value for this parameter, then in Box Applications Console in OAuth2 Parameters section for redirect_url set empty value or set url https://yourdomain.com/HTCOMNET/Handlers/BoxOAuth2Handler.ashx. For more info see Box OAuth 2.0 Documentation. Note 1! Be sure to use an SSL connection to HTTP Commander (see FAQ: How can I use HTTP Commander with SSL?). Note 2! For using this feature please make sure whether the Update KB2468871 to .NET Framework 4 is installed, and if not, install it on the server with HTTP Commander (update details info: KB2468871). | Box Element-IT HTTP Commander Secret
CloudConvertAPIKey | CloudConvert API Key. This key need for converting of files in different formats. See: https://cloudconvert.com/apiconsole. Note! For default API key used restrictions of the free plan for registered users. For use of own key follow the link https://cloudconvert.com/user/profile. See also parameters: EnableCloudConvert, CloudConvertConvertUrl, CloudConvertConversionTypesUrl. | CloudConvert Element-IT HTTP Commander API Key
ZohoNoExport | To forbid (if this value is "true") export of documents when editing in Zoho. | false
MarkRecentlyModifiedFolders | The setting defines whether date of modification should be checked for all folders (including root folders) to display "modified" icon. It means that folder will be marked with 'modified' icon if ANY of subfolders or files were modified within a period of time specified in TimeIntervalMarkRecentlyModifiedFiles setting. NOTE: Enabling this setting may dramatically increase time of listing folder contents, because each folder checked recursively. | false
IndependedSubAdmins | The key defines if 'SubAdmins' (users who have permissions defined on 'Admin permissions' tab in admin panel) will be independed from each other. Independed admin will be able to control only users/groups/folders created by themselves. Note! When its value is set to true, then in Forms Authentication version: all subadmins who have permissions to manage users/groups, folders, public folders, view logs, will see only users/groups and folders created by themselves. In public folders an in Logs tabs will see only data related to their users. For other auth modes only Folders will be independent. All other data (users, groups, logs, public folders) will be common for all subadmins. | false
MSOFBAloginPageBackgroundImage | The relative path of the background image (from Images folder) for the login page used in Office Form Based Authentication for editing documents in Microsoft Office. If is empty or specified invalid relative path - used default value bg.jpg. See UseMSOFBAwithMSOffice and MSOFBAloginPageCaption parameters. | "bg.jpg"
MSOFBAloginPageCaption | Caption text for the login page used in Office Form Based Authentication for editing documents in Microsoft Office. If is empty used localized string from key LoginTitle. See UseMSOFBAwithMSOffice and MSOFBAloginPageBackgroundImage parameters. | ""
UsersDataEventsMaxCount | Max count of recents records for EACH user. Min value: 1. Note! Control the number of records (if EnableRecents=true) is carried out periodically, every OldDataCleaningInterval seconds (if greater than 0). If amount of recent records exceeds the value of this parameter, then the oldest entries are deleted. See also parameters: EnableRecents, OldDataCleaningInterval. Note! Not recommended to be great value, because in the UI, list is displayed without paging. | 100
TwoFactorDuoAppKey | Application key for DUO security authentication. You can set any string value here with minimum length of 40 symbols. By default it generated during first launch to a random string. To generate new string, set value to empty string. Minimum length is 40 characters. | ""
SendNotificationsIntervalOfWatchedChanges | How often (interval in seconds) to send a notification about changes in the observed files/folderds. See AllowUsersWatchModifications parameter. Note! If you set the interval to 0, the notification will not be sent and the ability to specify an email address for notifications about the observed changes of files, folders will not be available to users. | 600 (10 minutes)
MailSubjectOfWatchedChanges | Subject of mails with notification of changes observed for files, folders. See parameters: AllowUsersWatchModifications, SendNotificationsIntervalOfWatchedChanges. | "Information about the file, folders changes"
LogRecordsMaxCount | Max size of records for log store. If set to 0, records count is not limited. Note! The control of the number of records (if the value is greater than 0 and if LogEvents list is not empty) is carried out periodically, every OldDataCleaningInterval seconds (if greater than 0). If amount of records exceeds the value of this parameter, then the oldest entries are deleted. | 100000
OldDataCleaningInterval | How often (interval in seconds) store cleanup procedure should be performed. During this procedure old data (event log entries, recents, favorites, etc.) removed from the store. Records removed only if appropriate restriction on the number of entries exceeded. If set to 0, then the cleanup is not performed. Note! We strongly recommend to not set the value to the 0, because the storage may eventually become large in size. Instead, change the respective maximum values ​​of the number of entries: LogRecordsMaxCount, UsersDataEventsMaxCount, etc.. | 600 (10 minutes)
MaxSearchResultsPerPage | The maximum number of search items on the search results page (in the range from 1 to 500). See also parameters SearchCriterionsOfFiles, SearchMethodOfFiles, EnableWindowsSearchQueryBuilder | 20
EnableWindowsSearchQueryBuilder | Enable Windows Search Query Builder, available from the toolbar on the Folders tab in the admin panel. If searches using Windows Search Service is enabled, you can use this option to fine-tune or check the SQL queries to the Windows Search Service (for example, those who have fallen into the error log). If enabled all search queries performed by users will be recorded in Debug\debug.log in the root folder of the application. This option applies only if SearchMethodOfFiles=OnlyWindowsSearch or FirstTryWindowsSearchThanStandard. The Query Builder is a simple text editor for the SQL, with the ability to output the results in a table. See also Windows Search manual and other search parameters SearchMethodOfFiles, SearchCriterionsOfFiles, MaxSearchResultsPerPage. | false
MethodCalcPermissionsForPath | Method of calculation of the permissions for the folder path. Possible values: CombineWithOrFromAllParents (by default) - permissions on a folder are evaluated using the 'OR' union, among the parent paths available to the user, including the path for which the permissions are calculated. For example, if for the user assigned two folders 'Foder1' (path 'd:\folder\') and 'Folder2' (path 'd:\folder\subfolder\'), then the calculation of permissions for the 'Folder2' will be selected as much as possible maximized resolution between 'Folder1' and 'Folder2' (because 'Folder1' is the parent of 'Folder2'), ie if the action 'Create' from the user folder 'Folder1' is allowed, but for 'Folder2' - is prohibited, as the result it will be allowed for 'Folder2' . CombineWithOrFromNearestParents - undertake permit (available for the current user) from the nearest parent. Use this method if you have configured different folders with the same (or, if one is embedded in the other) paths, and if necessary to take into account their different permissions for users. See also Folder permissions. | "CombineWithOrFromAllParents"