According to the following link, I need to set full control for
IIS_WPG to the folder systemroot\system32\inetsrv\ASP Compiled
Templates

I'd like to know whether I can make do with 'modify' instead?
http://support.microsoft.com/defaul...kb;EN-US;332097

Also, is it the IWAM user which needs access to this directory? If so,
I'd like to know if I can just set the permission for IWAM rather than
for the IIS_WPG group.

Thanks in advance
Andy Cheung

[ Post a follow-up to this message ]

Hi,

I do not know if you can get away with Modify. On a default install of
IIS6.0 it is Full Control. I would assume there is a reason for this :-)

IWAM is not used *unless*
- you are running IIS in "IIS 5.0 Isolation Mode"
- you are running applications in "medium" or "high" isolation. If so,
then these apps run in dllhost.exe and the default process identity is IWAM.
You can change that identity in Component Services admin tool if you want

In IIS 6.0 Worker Process Isolation mode, apps run inside w3wp.exe now. You
control the process identities in IIS Manage (expand the Web App Pools
node). The default app pool identity is now NT AUTHORITY\Network Service

Cheers
Ken

"Andy Cheung" <andycheung2000@hotmail.com> wrote in message
news:f007cbe5.0404200745.520bc77c@posting.google.com...
: According to the following link, I need to set full control for
: IIS_WPG to the folder systemroot\system32\inetsrv\ASP Compiled
: Templates
:
: I'd like to know whether I can make do with 'modify' instead?
: http://support.microsoft.com/defaul...kb;EN-US;332097
:
: Also, is it the IWAM user which needs access to this directory? If so,
: I'd like to know if I can just set the permission for IWAM rather than
: for the IIS_WPG group.
:
: Thanks in advance
: Andy Cheung

[ Post a follow-up to this message ]