Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to use IIS7 web server. I found out that I cannot edit (or create) files in this directory. The reason for that is that this directory has read-only permissions. I could change this permissions but I am afraid that it can make a hole in the security of my site. I mean, for example, if this directory has write-permissions that somebody from "outside" can put there some "shit". Or I should not worry about that?

share|improve this question
up vote 3 down vote accepted

It really depends who you are giving permissions to. If you give everyone write permissions to that folder, then yes anyone will be able to write anything to that folder, which is not good. Similarly if you give write permissions to the account your site runs under you are opening your self up to trouble.

If you just want to give write permissions to your user account, to allow you to write files via FTP or if you have RDP access then you should be ok. However, I would suggest you get yourself a firm understanding of how Windows permissions work before you go and change any of them.

share|improve this answer

It really depends on the other security that you have on this site. If it's IP restricted to just a few users, then there shouldn't be a problem. However, if its a public site, then I would suggest that this would be a bad idea- without further security.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.