IIS Server Security - IIS 5.1 (WinXP Pro) not accepting file permissions.

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2005 > IIS 5.1 (WinXP Pro) not accepting file permissions.





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS 5.1 (WinXP Pro) not accepting file permissions.
lsproc

2005-12-13, 5:58 pm

I am using IIS to test some software (mainly YaBB and other free forum
software) however YaBB is complaining that it can not write to its files in
the cgi-bin directory. I looked at the file permissions in the MMC snapin and
it is reporting that Script write access, Read Access, Write Access, Logging
and Indexing are enabled. It also said that Scripts have permissions to run.
However I am still getting the write problems. I tested the EasyMod extension
for phpbb that relies on write access and it reports that there is no write
access. I do not have FrontPage extensions but I do have ASP.NET 1.1 and 2.0.
Plus I am using MMC 3.0 RC1. I only got this problem quite recently. Before
that it worked fine (apart from I had problems connecting remotely. I think
that was caused by the lockdown tool). Could someone help me please. (On
another note will it be possible to backport IIS 6 to WinXP Pro. Its a tad
annoying having to use old software).
Ken Schaefer

2005-12-13, 8:50 pm

You probably need to check NTFS permissions *not* the IIS Write Permission
(which is mainly used for WebDAV). Uncheck "Write" access in IIS Manager,
and verify that your NTFS permissions are correct. To do this, right-click
on the folder in question in Explorer and choose Properties -> Security tab.
If you can't see a security tab, disable Simple Filesharing first (in
Explorer Tools -> Folder options -> uncheck "use simple file sharing
(recommended)"

In answer to your second question - IIS6 will not be backported to WinXP. It
relies on certain system functionality that does not exist in XP

Cheers
Ken

"lsproc" <lsproc@discussions.microsoft.com> wrote in message
news:4192D381-8146-4D23-94E2-7F825C2B882F@microsoft.com...
:I am using IIS to test some software (mainly YaBB and other free forum
: software) however YaBB is complaining that it can not write to its files
in
: the cgi-bin directory. I looked at the file permissions in the MMC snapin
and
: it is reporting that Script write access, Read Access, Write Access,
Logging
: and Indexing are enabled. It also said that Scripts have permissions to
run.
: However I am still getting the write problems. I tested the EasyMod
extension
: for phpbb that relies on write access and it reports that there is no
write
: access. I do not have FrontPage extensions but I do have ASP.NET 1.1 and
2.0.
: Plus I am using MMC 3.0 RC1. I only got this problem quite recently.
Before
: that it worked fine (apart from I had problems connecting remotely. I
think
: that was caused by the lockdown tool). Could someone help me please. (On
: another note will it be possible to backport IIS 6 to WinXP Pro. Its a tad
: annoying having to use old software).


lsproc

2005-12-14, 2:49 am



"Ken Schaefer" wrote:

> You probably need to check NTFS permissions *not* the IIS Write Permission
> (which is mainly used for WebDAV). Uncheck "Write" access in IIS Manager,
> and verify that your NTFS permissions are correct. To do this, right-click
> on the folder in question in Explorer and choose Properties -> Security tab.
> If you can't see a security tab, disable Simple Filesharing first (in
> Explorer Tools -> Folder options -> uncheck "use simple file sharing
> (recommended)"
>
> In answer to your second question - IIS6 will not be backported to WinXP. It
> relies on certain system functionality that does not exist in XP
>
> Cheers
> Ken
>
> "lsproc" <lsproc@discussions.microsoft.com> wrote in message
> news:4192D381-8146-4D23-94E2-7F825C2B882F@microsoft.com...
> :I am using IIS to test some software (mainly YaBB and other free forum
> : software) however YaBB is complaining that it can not write to its files
> in
> : the cgi-bin directory. I looked at the file permissions in the MMC snapin
> and
> : it is reporting that Script write access, Read Access, Write Access,
> Logging
> : and Indexing are enabled. It also said that Scripts have permissions to
> run.
> : However I am still getting the write problems. I tested the EasyMod
> extension
> : for phpbb that relies on write access and it reports that there is no
> write
> : access. I do not have FrontPage extensions but I do have ASP.NET 1.1 and
> 2.0.
> : Plus I am using MMC 3.0 RC1. I only got this problem quite recently.
> Before
> : that it worked fine (apart from I had problems connecting remotely. I
> think
> : that was caused by the lockdown tool). Could someone help me please. (On
> : another note will it be possible to backport IIS 6 to WinXP Pro. Its a tad
> : annoying having to use old software).
>
>
>


Thanks! Ill try that. Ill just need to make sure there is no password for
the file sharing. I think a 2 layer firewall and WPA is good enough.
Ken Schaefer

2005-12-15, 8:50 pm


"lsproc" <lsproc@discussions.microsoft.com> wrote in message
news:42819332-11AD-4719-B420-C05257939435@microsoft.com...
:
:
: "Ken Schaefer" wrote:
:
: > You probably need to check NTFS permissions *not* the IIS Write
Permission
: > (which is mainly used for WebDAV). Uncheck "Write" access in IIS
Manager,
: > and verify that your NTFS permissions are correct. To do this,
right-click
: > on the folder in question in Explorer and choose Properties -> Security
tab.
: > If you can't see a security tab, disable Simple Filesharing first (in
: > Explorer Tools -> Folder options -> uncheck "use simple file sharing
: > (recommended)"
: >
: > In answer to your second question - IIS6 will not be backported to
WinXP. It
: > relies on certain system functionality that does not exist in XP
: >
: > Cheers
: > Ken
: >
: > "lsproc" <lsproc@discussions.microsoft.com> wrote in message
: > news:4192D381-8146-4D23-94E2-7F825C2B882F@microsoft.com...
: > :I am using IIS to test some software (mainly YaBB and other free forum
: > : software) however YaBB is complaining that it can not write to its
files
: > in
: > : the cgi-bin directory. I looked at the file permissions in the MMC
snapin
: > and
: > : it is reporting that Script write access, Read Access, Write Access,
: > Logging
: > : and Indexing are enabled. It also said that Scripts have permissions
to
: > run.
: > : However I am still getting the write problems. I tested the EasyMod
: > extension
: > : for phpbb that relies on write access and it reports that there is no
: > write
: > : access. I do not have FrontPage extensions but I do have ASP.NET 1.1
and
: > 2.0.
: > : Plus I am using MMC 3.0 RC1. I only got this problem quite recently.
: > Before
: > : that it worked fine (apart from I had problems connecting remotely. I
: > think
: > : that was caused by the lockdown tool). Could someone help me please.
(On
: > : another note will it be possible to backport IIS 6 to WinXP Pro. Its a
tad
: > : annoying having to use old software).
: >
: >
: >
:
: Thanks! Ill try that. Ill just need to make sure there is no password for
: the file sharing. I think a 2 layer firewall and WPA is good enough.


File sharing is not involved, and have nothing to do with this.

Cheers
Ken


lsproc

2005-12-16, 2:49 am

I know. There seemed to be a lot of users. Which one do I have to set it for.
There was a lot of unknown users that had the ActivePerl icon.

Now I have changed the setting can I still use the permissions in the snapin
to control permissions for the folders in my site?

"Ken Schaefer" wrote:

>
> "lsproc" <lsproc@discussions.microsoft.com> wrote in message
> news:42819332-11AD-4719-B420-C05257939435@microsoft.com...
> :
> :
> : "Ken Schaefer" wrote:
> :
> : > You probably need to check NTFS permissions *not* the IIS Write
> Permission
> : > (which is mainly used for WebDAV). Uncheck "Write" access in IIS
> Manager,
> : > and verify that your NTFS permissions are correct. To do this,
> right-click
> : > on the folder in question in Explorer and choose Properties -> Security
> tab.
> : > If you can't see a security tab, disable Simple Filesharing first (in
> : > Explorer Tools -> Folder options -> uncheck "use simple file sharing
> : > (recommended)"
> : >
> : > In answer to your second question - IIS6 will not be backported to
> WinXP. It
> : > relies on certain system functionality that does not exist in XP
> : >
> : > Cheers
> : > Ken
> : >
> : > "lsproc" <lsproc@discussions.microsoft.com> wrote in message
> : > news:4192D381-8146-4D23-94E2-7F825C2B882F@microsoft.com...
> : > :I am using IIS to test some software (mainly YaBB and other free forum
> : > : software) however YaBB is complaining that it can not write to its
> files
> : > in
> : > : the cgi-bin directory. I looked at the file permissions in the MMC
> snapin
> : > and
> : > : it is reporting that Script write access, Read Access, Write Access,
> : > Logging
> : > : and Indexing are enabled. It also said that Scripts have permissions
> to
> : > run.
> : > : However I am still getting the write problems. I tested the EasyMod
> : > extension
> : > : for phpbb that relies on write access and it reports that there is no
> : > write
> : > : access. I do not have FrontPage extensions but I do have ASP.NET 1.1
> and
> : > 2.0.
> : > : Plus I am using MMC 3.0 RC1. I only got this problem quite recently.
> : > Before
> : > : that it worked fine (apart from I had problems connecting remotely. I
> : > think
> : > : that was caused by the lockdown tool). Could someone help me please.
> (On
> : > : another note will it be possible to backport IIS 6 to WinXP Pro. Its a
> tad
> : > : annoying having to use old software).
> : >
> : >
> : >
> :
> : Thanks! Ill try that. Ill just need to make sure there is no password for
> : the file sharing. I think a 2 layer firewall and WPA is good enough.
>
>
> File sharing is not involved, and have nothing to do with this.
>
> Cheers
> Ken
>
>
>

Ken Schaefer

2005-12-17, 2:48 am

You need to use whatever account IIS is impersonating. Generally this is
probably IUSR_<machinename>, but could be other accounts. You can use
Filemon from www.sysinternals.com to find out which account is being used to
access the disk.

Cheers
Ken

"lsproc" <lsproc@discussions.microsoft.com> wrote in message
news:AF3AC2AD-A1B4-4660-B714-12D6FB2760F9@microsoft.com...
:I know. There seemed to be a lot of users. Which one do I have to set it
for.
: There was a lot of unknown users that had the ActivePerl icon.
:
: Now I have changed the setting can I still use the permissions in the
snapin
: to control permissions for the folders in my site?
:
: "Ken Schaefer" wrote:
:
: >
: > "lsproc" <lsproc@discussions.microsoft.com> wrote in message
: > news:42819332-11AD-4719-B420-C05257939435@microsoft.com...
: > :
: > :
: > : "Ken Schaefer" wrote:
: > :
: > : > You probably need to check NTFS permissions *not* the IIS Write
: > Permission
: > : > (which is mainly used for WebDAV). Uncheck "Write" access in IIS
: > Manager,
: > : > and verify that your NTFS permissions are correct. To do this,
: > right-click
: > : > on the folder in question in Explorer and choose Properties ->
Security
: > tab.
: > : > If you can't see a security tab, disable Simple Filesharing first
(in
: > : > Explorer Tools -> Folder options -> uncheck "use simple file sharing
: > : > (recommended)"
: > : >
: > : > In answer to your second question - IIS6 will not be backported to
: > WinXP. It
: > : > relies on certain system functionality that does not exist in XP
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : > "lsproc" <lsproc@discussions.microsoft.com> wrote in message
: > : > news:4192D381-8146-4D23-94E2-7F825C2B882F@microsoft.com...
: > : > :I am using IIS to test some software (mainly YaBB and other free
forum
: > : > : software) however YaBB is complaining that it can not write to its
: > files
: > : > in
: > : > : the cgi-bin directory. I looked at the file permissions in the MMC
: > snapin
: > : > and
: > : > : it is reporting that Script write access, Read Access, Write
Access,
: > : > Logging
: > : > : and Indexing are enabled. It also said that Scripts have
permissions
: > to
: > : > run.
: > : > : However I am still getting the write problems. I tested the
EasyMod
: > : > extension
: > : > : for phpbb that relies on write access and it reports that there is
no
: > : > write
: > : > : access. I do not have FrontPage extensions but I do have ASP.NET
1.1
: > and
: > : > 2.0.
: > : > : Plus I am using MMC 3.0 RC1. I only got this problem quite
recently.
: > : > Before
: > : > : that it worked fine (apart from I had problems connecting
remotely. I
: > : > think
: > : > : that was caused by the lockdown tool). Could someone help me
please.
: > (On
: > : > : another note will it be possible to backport IIS 6 to WinXP Pro.
Its a
: > tad
: > : > : annoying having to use old software).
: > : >
: > : >
: > : >
: > :
: > : Thanks! Ill try that. Ill just need to make sure there is no password
for
: > : the file sharing. I think a 2 layer firewall and WPA is good enough.
: >
: >
: > File sharing is not involved, and have nothing to do with this.
: >
: > Cheers
: > Ken
: >
: >
: >


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com