Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i'm using IIS7 express and therefore need to unblock port 80 if I wish to hit the website locally and on the default http port. To do this, i use ..

netsh http add urlacl url= user=mydomain\myusername

is it possible to say something like

netsh http add urlacl url=*:80/ user=*

so basically, anything going to port 80, by anyone, is allowed?

share|improve this question
up vote 3 down vote accepted

See here: which shows this:

netsh http add urlacl url=http://+:80/MyUri user=DOMAIN\user

My understanding is that it will listening to anything at port 80 and if you want it linked to a specific address, you'd actually have to unbind it. That's what I have to do if I want to run IIS and Apache on the same box with both listening to port 80.

For the user, domain\domain users should be a valid domain group which includes everyone.

share|improve this answer
I found that I had to use * instead of +. My binding looks like <binding protocol="http" bindingInformation="*:1421:*"/>. Why does + work for you? – binki Mar 26 '15 at 14:44
netsh http add urlacl url=http://+:80/ user=Everyone

Note that the valid value for user actually depends on your system language (Everyone for English, Jeder for German).

share|improve this answer
+1 For the localization information – Basic Mar 1 '15 at 23:34

Basing on @jgillich answer, I propose to do the following:

netsh http add urlacl url=http://+:80/ sddl=D:(A;;GX;;;S-1-1-0) 

sddl argument will be virtually the same as user, but you don't need to think of a localized group name. So, it's more universal.

share|improve this answer
Wouldn't it be better to use S-1-2-0 to only use local users? – Johny Skovdal Aug 14 '15 at 5:38
in our configuration we need domain user support, S-1-2-0 would not work, but if someone can confirm one form is valid for local users and the other for domain users that would be excellent information. – Shaun Wilson Dec 10 '15 at 0:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.