|
Home > Archive > IIS Server Security > April 2004 > Permissions on ASP Compiled Templates folder
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Permissions on ASP Compiled Templates folder
|
|
| Andy Cheung 2004-04-20, 12:36 pm |
| According to the following link, I need to set full control for
IIS_WPG to the folder systemroot\system32\inetsrv\ASP Compiled
Templates
I'd like to know whether I can make do with 'modify' instead?
http://support.microsoft.com/defaul...kb;EN-US;332097
Also, is it the IWAM user which needs access to this directory? If so,
I'd like to know if I can just set the permission for IWAM rather than
for the IIS_WPG group.
Thanks in advance
Andy Cheung
| |
| Ken Schaefer 2004-04-21, 12:34 am |
| Hi,
I do not know if you can get away with Modify. On a default install of
IIS6.0 it is Full Control. I would assume there is a reason for this :-)
IWAM is not used *unless*
- you are running IIS in "IIS 5.0 Isolation Mode"
- you are running applications in "medium" or "high" isolation. If so,
then these apps run in dllhost.exe and the default process identity is IWAM.
You can change that identity in Component Services admin tool if you want
In IIS 6.0 Worker Process Isolation mode, apps run inside w3wp.exe now. You
control the process identities in IIS Manage (expand the Web App Pools
node). The default app pool identity is now NT AUTHORITY\Network Service
Cheers
Ken
"Andy Cheung" <andycheung2000@hotmail.com> wrote in message
news:f007cbe5.0404200745.520bc77c@posting.google.com...
: According to the following link, I need to set full control for
: IIS_WPG to the folder systemroot\system32\inetsrv\ASP Compiled
: Templates
:
: I'd like to know whether I can make do with 'modify' instead?
: http://support.microsoft.com/defaul...kb;EN-US;332097
:
: Also, is it the IWAM user which needs access to this directory? If so,
: I'd like to know if I can just set the permission for IWAM rather than
: for the IIS_WPG group.
:
: Thanks in advance
: Andy Cheung
|
|
|
|
|