Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I was recently setting up a Drupal install on IIS7. The setup instructions required that the IIS_IUSRS account be given, temporarily, write access to the settings.php file so it could write the database configuration to the file.

In the end I had to edit the file myself and input the database configuration details myself. What I am wondering is why the instruction specified the IIS_IUSRS account rather than the IUSR account.

Perhaps I am not properly understanding how IIS_IUSRS and IUSR differ.

share|improve this question

1 Answer 1

up vote 4 down vote accepted

Here is a good documentation about groups and users used in IIS 7. IUSR is built-in account for all anonymous authentication. IIS_IUSR is a built-in group has access to all the necessary file and system resources so that an account, when added to this group, can seamlessly act as an application pool identity.

You need to check if Drupal has any account specifically added in the IIS_IUSR group such that giving permission to the group suffices the need.

Going through Drupal document shows that it requires the IIS build-in group permission.

On a Windows system using IIS, right-click on sites/default/settings.php and grant Modify permissions to IIS_WPG (IIS6) or IIS_IUSRS (IIS7).
share|improve this answer
    
Thanks for the reply. So would I need to add a user to the group IIS_IUSRS for it to have any effect? You see, I did give the IIS_IUSRS group write permissions to settings.php file but Drupal still seemed unable to write to it. –  webworm Nov 15 '10 at 16:38
    
in that case I would use Process Monitor and check what permission Drupal is looking for. –  Vivek Kumbhar Nov 15 '10 at 17:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.