Re: Traverse rights - yet can read files. Help?

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 04/27/05


Date: Tue, 26 Apr 2005 21:35:26 -0700

I'm not an NTFS ACL expert, but this definitely is not an IIS security
issue. You need to ask this in a core Windows Security group about how NT
ACLs work. I do not think you set up the NTFS ACLs correctly because the
"List" and "Read" permissions should already be able to control whether a
user can list files and look inside of each file.

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
<ben.werdmuller@sbs.ox.ac.uk> wrote in message
news:1114509553.650027.313410@f14g2000cwb.googlegroups.com...
Hi all,
I've got an IIS webserver where I need some users (authenticated using
active directory) to have traverse rights through a directory but *not*
rights to read or execute any of the files in it. I've set up a
particular group with traversal rights with no read/execute, yet try as
I might, I can't prevent them from opening the files.
Anyone got any idea what the problem might be? Is this just not
possible in IIS, or is there some rights management thing I've
forgotten to take into account? It's driving me nutty ...
Cheers,
Ben


Relevant Pages

  • Re: IIS 5.0 - Create Server Certificate Wizard
    ... "sgm" wrote: ... I have admin rights to my machine. ... >>> Jason Brown ... >>> Microsoft GTSC, IIS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Make IIS 5.0 recognize NTFS Permissions??
    ... I've played with the IIS ... The rights on the ... Configure IIS 5.0 Web Site Authentication in Windows 2000 ...
    (microsoft.public.inetserver.iis)
  • Re: web cam?
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I'll just have to camera take incremental> shots, store the images in a directory, and set-up an IIS web pointing to> the folder so I can see them. ... >> Jason Brown ...
    (microsoft.public.inetserver.asp.general)
  • Re: IIS6 - Disaster Recovery -IISCNFG - changing Anonymous User
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... suppose IIS changes how to encrypt/decrypt such secret ... >> encrypt/decrypt -- IIS will do it for you accordingly to the current ...
    (microsoft.public.inetserver.iis)
  • Re: IIS rights without being administrator
    ... person or group administrative rights on that object. ... > provide some of web/apps developers I work with the ability to ... > MMC with the IIS Admin snap-in, but, when they expand it to, they are ...
    (microsoft.public.windows.server.general)