Security
From: michael (noemail@bleh.com)
Date: 07/10/02
- Next message: Utz: "Re: File permissions question"
- Previous message: brian: "Arbitrary lockout by IE or Win2000?"
- In reply to: Boris Torres: "Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "michael" <noemail@bleh.com> Date: Wed, 10 Jul 2002 13:21:48 -0700
first off, it's never a good idea to use real names in a
public forum, especially when the forum is about security
issues =)
use NTFS permissions to restrict access to that directory.
if there are other tools that require public or general
access, then move the file to a separete directory and
lock it down, allowing only those that need access to that
file.
i suggest checking out the IIS lockdown tool and URLScan
tool, both available from MS.
michael
>-----Original Message-----
>My Domain Controller is Windows NT server.
>I have windows 2000 server running IIS 5.
>
>It hosts a webpage named www.groupworld.org
>
>It contains a subdirectory named scripts.
>
>D:\groupworld
>D:\groupworld\scripts
>D:\groupworld\scripts\as_web4.exe
>
>But I need improve security to use that file..
>
>I mean, I would like enter user and password to access it.
>
>http://www.groupworld.org/scripts/as_web4.exe?
>Command=SD&File=internet
>
>Please, help me
>
>Thanks,
>
>
>Boris
- Next message: Utz: "Re: File permissions question"
- Previous message: brian: "Arbitrary lockout by IE or Win2000?"
- In reply to: Boris Torres: "Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
