Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are using an IIS 6.0 server on a Windows 2003 machine. We need to allow PHP to upload Word documents to a folder on our website that can then be read by visitors to the site. We do not want to grant the anonymous IUSER write access. So, what is the best way to do this without compromising security?

share|improve this question

migrated from Sep 10 '11 at 13:00

This question came from our site for professional and enthusiast programmers.

You should make a service user and run the application pool for that site as the user. Then grant that user the permission to write to whatever folder you want. One way or another, someone is going to have to get write access, whether is the anonymous account or the service account.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.