IIS Server Security - IIS inetpub folder

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2005 > IIS inetpub folder





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS inetpub folder

2005-12-16, 5:57 pm

I have a webserver running IIS 6.0. All the sites are stored on a network
share. Can I change the permissions on the Inetpub folder to only allow
admin access? What NTFS permissions do i need to set on the mailroot folder
so that sites can send mail to the queue through cdonts?
Thanx


Bernard Cheah [MVP]

2005-12-20, 8:00 am

The inetpub folder permission ? well, as long as the IIS user has
permissions over it, I don't see any issue. E.g. if it allow anonymous
access, then make sure anonymous account has at least READ permission.
Next, I can understand why you want to put all web files in a share drives,
but for mailroot, I would suggest to leave it on the machine itself.
As for the permission, again the user need to have CHANGE permission. Refer
the following KB, it shows the permissions needed.

Runtime Error '800a0046' Using the Send Method of CDONTS.NewMail
http://support.microsoft.com/?id=197619

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/blogs/bernard/


<rvegas@rogers.com> wrote in message
news:eWdvkQoAGHA.740@TK2MSFTNGP12.phx.gbl...
>I have a webserver running IIS 6.0. All the sites are stored on a network
>share. Can I change the permissions on the Inetpub folder to only allow
>admin access? What NTFS permissions do i need to set on the mailroot folder
>so that sites can send mail to the queue through cdonts?
> Thanx
>



2005-12-28, 6:10 pm

Thanks Bernard.

"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:uzADBqUBGHA.4076@TK2MSFTNGP14.phx.gbl...
> The inetpub folder permission ? well, as long as the IIS user has
> permissions over it, I don't see any issue. E.g. if it allow anonymous
> access, then make sure anonymous account has at least READ permission.
> Next, I can understand why you want to put all web files in a share
> drives, but for mailroot, I would suggest to leave it on the machine
> itself.
> As for the permission, again the user need to have CHANGE permission.
> Refer the following KB, it shows the permissions needed.
>
> Runtime Error '800a0046' Using the Send Method of CDONTS.NewMail
> http://support.microsoft.com/?id=197619
>
> --
> Regards,
> Bernard Cheah
> http://www.iis-resources.com/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/blogs/bernard/
>
>
> <rvegas@rogers.com> wrote in message
> news:eWdvkQoAGHA.740@TK2MSFTNGP12.phx.gbl...
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com