Re: run ASP with admin rights?!
From: x y (jamescagney90210@yahoo.com)
Date: 06/13/02
- Next message: x y: "Re: How to prevent hackers"
- Previous message: x y: "Re: directories that I am unable to delete"
- In reply to: azerty123: "run ASP with admin rights?!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <jamescagney90210@yahoo.com> Date: Thu, 13 Jun 2002 11:08:50 -0400
I believe .asp code run on an IIS web server gets the permissions of the ID
used for anonymous browsing in IIS [e.g. iusr_computername by default] if
the application isolation settings on that folder in the IIS MMC is set to
low. The .asp code by default gets the permissions of the IWAM_computername
ID if the application isolation settings are set to high. The IWAM ID can
be changed to something else. These IDs can be set up on other computers or
in the windows domain to get permissions on other computers.
To get information on what ID is being used as the IWAM ID, run the
adsutil.vbs file on the IIS metabase as described in
www.microsoft.com/support to determine or change the IWAM ID. I'm going
from memory here, but running dcomcnfg or the other MMCs in the IIS MMC or
another MMC such as component services MMC may help you see some other
permissions given to the IWAM ID.
"azerty123" <nomail@nowhere.no> wrote in message
news:zpHN8.29185$ud.3724@afrodite.telenet-ops.be...
> I've got a situation, when a normal user runs an ASP script on his own
> "webdrive", he seems to have administrative right !
> He can access files and folders where he does not have NTFS access to
using
> the filesystem component of ASP.
>
> I'm trying to simulate that behavior on another IIS server, but I can't
get
> it done...
>
> How can this be possible?
> by running an ASP application in-process?
> by changing something in the components mmc?
>
>
> thnx!
>
>
- Next message: x y: "Re: How to prevent hackers"
- Previous message: x y: "Re: directories that I am unable to delete"
- In reply to: azerty123: "run ASP with admin rights?!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
