Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Recently I was subject to a hack by "HACKED BY SyRSyR!4N M43STR0". Thankfully, no real damage.

I am trying to figure out how they got in and was checking my permissions on some of my folders. I'm not sure I understand what user gives the public user visiting the site access to the website.

Here is some examples:

enter image description here enter image description here

  1. Should any user have write capabilities on the folders that are in my site?
  2. How about execute capabilities?
  3. Lastly, who is the 'public' user that when the user visits the site that gives them access? <-- this is one of my main questions

Thanks!

===== EDIT #1 =====

I have some sites that do not have an app pool account on them such as:

enter image description here

How is the user able to access the site with no app pool account access? Is the app pool the default user account? Also, should I add the account manually?

share|improve this question

1 Answer 1

up vote 4 down vote accepted
+50

The app pool account only need read access to the files and folders. Your admins domain accounts (or machine accounts) will need write access, but the site doesn't. The only exception to that would be if the website needs the ability to upload files to the site, in which case the app pool would need write access to the folder that the site will be uploading to.

share|improve this answer
    
some of them my sites do not have the app pool account on them. I have updated my question. Ty! –  ErocM Mar 8 '13 at 14:54
    
On sites like that I'd recommend making sure that the TGServer\Users have read access (the app pool account will be in that group by default) and that the admins group has write access. Creator and system can be left as the default. If you look in the users group you'll find authenticated users listed, which is basically everyone including the app pool account. Make sure that the app pool isn't configured to run as an account which is a local admin. –  mrdenny Mar 11 '13 at 12:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.