Re: IIS - Sub directory permissions

From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 11/01/02


From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com>
Date: Thu, 31 Oct 2002 21:33:42 -0500


"Gary Cuthbert" <gary.cuthbert@virgin.net> wrote in message
news:3dgw9.1362$J45.157253@newsfep1-win.server.ntli.net...
> Hello, has anyone managed to set permissions for a virtual directory
> subdirectory under iis from a vbscript? I have a vbscript that creates
> several virtual directories as part of an installer app (using
> GetObject("IIS://Localhost/w3svc/1/root") and the like).
>
> The msdn documentation suggests that the same process can be used to set
iis
> folder permissions (e.g. write access) for subdirectories under the
virtual
> directory but the call to GetObject with the path to the subdirectory
fails.
>
> The odd thing is that i used the example iss admin vb script 'chaccess'
and
> got the same results however if i load up the control panel 'internet
> information services' app and set the option (write access) there, apply,
> then remove the setting suddenly chaccess works as does my script (hence
> GetObject). Its as if iis only recognises a sub directory once the
Internet
> Services Manager is prompted to do something with it.
>
> Has anyone managed to do this kind of thing from a script? any help or
> advice would be most welcome.

It's a good idea both for troubleshooting and security to enable file and
registry access failure auditing on all files and the HKEY_Local_Machine
registry hive. Then you can see what is going wrong in the Windows security
event log. Search this newsgroup for "auditing" for further instructions.

Also, as you may already know, if these are web scripts [such as .ASP] and
the "application isolation" setting on the folder containing the scripts is
set to Medium or High in the IIS MMC, the IWAM_computername account is being
used instead of the anonymous user account.

I assume you've already read www.iisfaq.com and www.microsoft.com/support,
especially searching for the sections on "minimum NTFS permissions" for IIS
to work.



Relevant Pages

  • IIS & ASP security advice
    ... I have a user who has requested special permissions on my IIS 5.0 server. ... that they do but IIS does not allow this to happen unless an ASP script is ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS & ASP security advice
    ... Use NTFS Security to Protect a Web Page Running on IIS 4.0 or 5.0 ... > I have a user who has requested special permissions on my IIS 5.0 server. ... Basically, any> web users will not have access to write, it might be said in the permissions> that they do but IIS does not allow this to happen unless an ASP script is ... The script will only allow the upload of .mdb files. ...
    (microsoft.public.inetserver.iis.security)
  • Re: VS.NET 2005 and the "allowDefinition=MachineToApplication" error
    ... The script only assigned access permissions to MachineName\ASPNET ... If you want to use the default configured account, eliminate that entry, or configure it as: ... The easiest way to assign correct permissions to all required directories is to run: ... How do I configure a web project as an IIS application? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Password protecting a web directory in Windows 2000
    ... Simply set NTFS permissions on the folder, IIS will take care of allowing in ... only users with at least read permissions. ... >>Disable anonymous access on the directory using IIS ... Your CGI script should be able ...
    (microsoft.public.win2000.security)
  • Re: 404 error accessing my webservice PLEASE HELP
    ... That's 100% IIS issue I would say. ... services extensions ... I changed the permissions for the virtual directory. ...
    (microsoft.public.dotnet.framework.webservices)