Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I've installed a wordpress site in a dedicated server with Windows 2008 server running IIS7 but I'm a little confused on what's the most secure way to set the appropriate file settings.

The thing is the automatic update and automatic plugin installation only works if I give Full Control permission to the Everyone user in the root folder where wordpress is installed.

I'm not sure how dangerous this setting is, but I can imagine it's not the best scenario. That being said, what's the user I should use in the application pool used by this site, so that I can set a more restrictive security permission in the folders used by wordpress?

share|improve this question

marked as duplicate by Falcon Momot, Ward, mdpc, kce, Michael Hampton Jul 30 '13 at 4:02

This question was marked as an exact duplicate of an existing question.

Check out this similar question on serverfault. The answer by "Dscoduc" was spot on and worked for me.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.