Re: Can't download exe's from my own site

From: Jack Brewster (jbrewsterPLEASENO@SPAMnthurston.k12.wa.us)
Date: 06/05/02 

From: "Jack Brewster" <jbrewsterPLEASENO@SPAMnthurston.k12.wa.us>
Date: Wed, 5 Jun 2002 10:06:05 -0700

And that requires users to have .zip software and know how to use it. A
separate nightmare.

Jack

<jcochran at naplesgov dot com (Jeff Cochran)> wrote in message
news:3d04017b.25803583@news.supernews.com...
> >That did it! Thanks. Second question: I removed the .exe from the
> >urlscan.ini file in the DenyExtensions section, however does this now
allow
> >users to run executables also? I dont' want them to execute them, I want
> >them to only download them. Is there a way to turn one feature off
without
> >the other? Even though I have Execute Permissions to None, it still lets
> >users run an executable unless I put the exe back in the DenyExtensions.
>
> You may want to review your permissions, both in IIS and in the NTFS
> permissions for the file and folder. Users shouldn't be able to
> execute files if they don't have permission. If this is a download
> only, you can set the folder to read for the IUSR account and that
> should prevent execution.
>
> Better is to convert all executables to a ZIP file, and block EXE's
> using URLScan. But that might be a nightmare if you have a lot of
> them.
>
> Jeff

Relevant Pages

  • Solaris 10 autofs directory permissions - Solution
    ... the fact that my map file has 755 permissions not 644. ... If the execute permission is set, it becomes an executable map which is ... map is expected to return the content of an automounter map ...
    (SunManagers)
  • Re: Rights to execute jobs?
    ... Does anyone know if the rules surrounding stored procedure permissions apply ... Does this apply to a proc calling sp_start_job so that I ... raise the alert, so it could be anyone on the server. ... is that a group needs to not be an admin but still be able to execute ...
    (microsoft.public.sqlserver.security)
  • Re: Who buys/uses BASIC?
    ... I am talking about file permissions. ... It is possible to have execute permission without read. ... this with a script, because the script must be readable ... As far as I know, an interpreted bytecoded program is a script, from the point ...
    (comp.lang.basic.misc)
  • Re: Newbie
    ... I will now tell you some basic commands. ... Easy file has rights and a owner. ... file and who may execute it. ... The last three characters are about the permissions of user ...
    (alt.linux)
  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server doesn't check permissions on indirectly referenced objects as ... You can prevent ad-hoc execution of powerful master database procs while ... >I have a user who has execute permissions on a store procedure in a>database> which in turns executes 4 stored procedures in the master database. ...
    (microsoft.public.sqlserver.security)