Re: IIS 6 / FrontPage Group Isolation

From: Scott Muc (smuc_at_paconline.net)
Date: 07/15/03 

Date: Tue, 15 Jul 2003 10:40:23 -0700

>> Just found out something else. Extending FrontPage
>> extensions puts NETWORK/INTERACTIVE and the custom FPSE
>> group in the ACL only when the site was created using my
>> ASP createsite script.
>>
>> If I create the site manually it works fine. Not sure it
>> it will help but I'm attaching the code that creates a
>> website : http://muc-central.com/createsite.txt
>
>Hmmm. I do not really understand this behavior.
>

What's worse is that if I change one line of my script,
and set the home directory to a local folder, it works
fine.

>Your script, which by the way is quite similar to settings
>that I use, does not do the FP extending (which of course
>cannot be scripted - only shelled out to owsadm,
repetitively)
>

I have an ASP script that installs FP using WScript.Shell,
and owsradm.exe. I can post it on-line if you want to
check it out.

><PS> From the script I see you likely are already using
>separate iusr accounts (i.e. your iusername). However,
>as I understand it, to effect similar for the IWAM with
>IIS 6 you need to have an app pool per distinct authoring
>ownership (sounds like a performance killer doesn't it ?)
>Notice how that clarifies earlier response in other post
>where I was thinking IIS5.
></PS>

Yes, we are creating seperate IUSRs for every website, and
creating a seperate application pool for every website. I
prefer security/stability over performance enhanced
settings.

>> I guess I could create a site with my script, and
>> another manually and do a diff on the metabase
>>properties.

>We think alike, after reading this last I just cut out
>from further up where is now <PS>

Tried this, and the metabase settings were the same.

<-- snip -->

Relevant Pages

  • Re: Tooltips ?
    ... DIV with a high zindex method works if script is enabled (about 90% ... The IE popup method works only in IE6 with script enabled. ... was to a publicly-posted website. ... They test it out in their browser, ...
    (microsoft.public.scripting.vbscript)
  • Cookie not working for CGI logon script
    ... The problem I'm having is that umzadmin.cgi script makes me login twice ... before I can use the website. ... sub loginScreen { ... &SortForm), last SWITCH if param; ...
    (comp.lang.perl.misc)
  • Re: Port Scanner Reports
    ... option, in combination with a good script in linux, or a batch script ... >Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)
  • Re: Fehlerbehandlung
    ... >> Und jetzt verstehe ich den Verweis auf die Spracheinstellung nicht. ... dass das Script sich auf eine bestimmte Website ... > aktivieren/deaktivieren. ...
    (de.comp.lang.javascript)
  • Re: IIS 6 / FrontPage Group Isolation
    ... I tried creating a website using iisweb.vbs, ... complained about the UNC path. ... I also made it add the IUSR that I ... That script is where I ...
    (microsoft.public.inetserver.iis.security)