|
Home > Archive > IIS Server > December 2005 > Permissions for IIS6 wwroot/cgi-bin ?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Permissions for IIS6 wwroot/cgi-bin ?
|
|
|
| Config: win2003-SP1, IIS 6, stand alone (workgroup), .asp, asp.net,
cgi enabled; with virtual servers using host headers.
Just built my first win2003 server, all working fine. However, in
setting up a scripts directory and a virtual wwwroot, I noticed that
MS had granted quite a few users permissions to the default (MS
created) wwwroot directory. I see that "interactive", "creator owner",
"network" , "IIS_WPG", "network service", "IUSR", "and ows_admin*",
"system", "administrators", and "USERS" all have access to this folder
at some level.
Is there a short list somewhere of exactly what permissions are
actually needed? I come from and IIS 5 background... so I know IUSR*
read is needed for browsing, and I would always have admin access,
but do I need any of these others to accommodate other installed
components and services? I have the FP2002 extensions
installed and I need them to work for (remote from client) authors
who have local accounts on this machine (local power users). I also
need to craft scripts/cgi-bin permissions (also currently working,
somewhat more restricted since I created them but still inheriting a
lot of extra permissions from inetpub).
Thanks,
| |
| Consultant 2005-12-28, 6:10 pm |
| check out the iis authiag tool
http://www.microsoft.com/downloads/...&DisplayLang=en
"Bob" <uctraing@ultranet.com> wrote in message
news:20c5r113a0d9o4a0a3uotdr8ahu1h2jhdd@
4ax.com...
> Config: win2003-SP1, IIS 6, stand alone (workgroup), .asp, asp.net,
> cgi enabled; with virtual servers using host headers.
>
> Just built my first win2003 server, all working fine. However, in
> setting up a scripts directory and a virtual wwwroot, I noticed that
> MS had granted quite a few users permissions to the default (MS
> created) wwwroot directory. I see that "interactive", "creator owner",
> "network" , "IIS_WPG", "network service", "IUSR", "and ows_admin*",
> "system", "administrators", and "USERS" all have access to this folder
> at some level.
>
> Is there a short list somewhere of exactly what permissions are
> actually needed? I come from and IIS 5 background... so I know IUSR*
> read is needed for browsing, and I would always have admin access,
> but do I need any of these others to accommodate other installed
> components and services? I have the FP2002 extensions
> installed and I need them to work for (remote from client) authors
> who have local accounts on this machine (local power users). I also
> need to craft scripts/cgi-bin permissions (also currently working,
> somewhat more restricted since I created them but still inheriting a
> lot of extra permissions from inetpub).
>
> Thanks,
>
|
|
|
|
|