Re: IIS Seperate Partition?

From: Ryan Riddell (anonymous_at_discussions.microsoft.com)
Date: 05/30/04 

Date: Sat, 29 May 2004 17:46:02 -0700

Yeah, that's what I meant, throw the served files on a seperate partition. Just wanted to make sure I was headed down the right path.

Thanks for the advice,
Ryan
     
     ----- Jonathan Maltz [MS-MVP] wrote: -----
     
     Hi,
     
     There's no way to install the IIS system files on a partition other than the
     system partition, but you can move the files being served to another
     partition/folder (as most people do) so if a buffer overflow is found in
     your scripts a hacker doesn't know the right dynamic path (i.e,
     /../../windows/system/cmd.exe) right off the bat
     
     --
     --Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
     http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
     tutorial site :-)
     http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
     here
     Only reply by newsgroup. I do not do technical support via email. Any
     emails I have not authorized are deleted before I see them.
     
     
     "Ryan Riddell" <anonymous@discussions.microsoft.com> wrote in message
     news:DDB4975B-E550-47E7-AF08-68DD979B09FB@microsoft.com...
> I'm running Server 03 with a web server and file server as well as acting
     as a domain controller.
>> My question is if it would be more secure or considered a good idea to
     have the web server on its own partition?
>> The idea being that if a malicious user manages to take control of IIS
     they are sort of stuck on the individual partition. Also, if they manage to
     hose the partition it won't effect the other functions of the server.
>> Thanks,
> Ryan
     
     
     

Relevant Pages

  • Re: IIS Seperate Partition?
    ... Placing the content on a separate partition offers some amount ... Microsoft MVP (Windows Server System: ... > I'm running Server 03 with a web server and file server as well as acting ... > as a domain controller. ...
    (microsoft.public.inetserver.iis.security)
  • IIS Seperate Partition?
    ... I'm running Server 03 with a web server and file server as well as acting as a domain controller. ... The idea being that if a malicious user manages to take control of IIS they are sort of stuck on the individual partition. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Seperate Partition?
    ... >>I'm running Server 03 with a web server and file server ... >It's a great idea to separate the content partition from ... loaded up to get at some functionality? ... control of IIS they are sort of stuck on the individual ...
    (microsoft.public.inetserver.iis.security)
  • Re: Looking for ideal web-server partitions
    ... > I want to create a web server for a few personal web sites (virtual ... > partition as well as using a /home. ... mount you various partitions in more standard locations. ... standard filesystem layout, which in general is not a good thing. ...
    (freebsd-questions)
  • Re: Looking for ideal web-server partitions
    ... >No mail servers or other complicated stuff, ... >I'm pretty confused and would like to setup my web server the right way once ... I'm not even sure what exactly you would put on a /db partition, ... /usr/local/www/data is the default DocumentRoot for apache. ...
    (freebsd-questions)