Re: Default Website - Best Practise?
- From: Shaun Sawyer <kobikiuk@xxxxxxxxxxxxxxxx>
- Date: Mon, 26 Feb 2007 02:46:08 -0800
I agree entirely; unfortunately I have to deal with some dumb software until
the company gets it act together and rewrites it code.....
"Roger Abell [MVP]" wrote:
Personally, if I attempt to install something and it is so dumb.
as to assume the w3svc instance into which I want it installed,
then I do not what that crap code installed anyway.
The practice of moving the default site, or any other for that
matter, to a NTFS partition used only for web content originated
with attempts to prevent use of parent path traversal from getting
to executables. If parent paths is enabled, this is still a valid
practice as far as I can tell, although not necessarily to prevent
execution of what it can potentially make accessible.
Roger
""WenJun Zhang[msft]"" <wjzhang@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:IauxvBdVHHA.4088@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Shaun,
Yes, deleting the default web site is not recommended. This is because the
Default Web Site's ID in IIS metabase is 1 by default, i.e: /LM/W3SVC/1 .
You can check this by using Metabase Explorer utility in IIS 6.0 resource
kit tools:
Internet Information Services (IIS) 6.0 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=56fc
92ee-a71a-4c73-b628-ade629c89499
Some web application's uses the path /LM/W3SVC/1 by default. If the site
is
deleted, the installer cannot find this path and the installation process
fails.
Setting the home folder path of the default web site and log file path to
a
dedicated NTFS volume shouldn't affect anything because most of web
application installation are using virtual directories. Even if it refers
to the Default Web Site's physical path, the installer should look for the
Path property under /LMW3SVC/1/Root to locate it and copy files.
Please let me know if you have any further question.
Thanks for using MSDN newsgroup and have a nice day.
Sincerely,
WenJun Zhang
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.
- References:
- RE: Default Website - Best Practise?
- From: "WenJun Zhang[msft]"
- Re: Default Website - Best Practise?
- From: Roger Abell [MVP]
- RE: Default Website - Best Practise?
- Prev by Date: RE: Default Website - Best Practise?
- Next by Date: Re: Prompts for username and password
- Previous by thread: Re: Default Website - Best Practise?
- Next by thread: RE: Default Website - Best Practise?
- Index(es):
Relevant Pages
|