Tagged Questions

1
vote
1answer
35 views

Network Services Write/Modify Permissions on Inetpub Folder Potiential security issues

I have an asp.net web application that runs as a Content Management system for a website. It was originally on an IIS6 Server. However the web application was recently moved to an II7 Server. After ...
2
votes
2answers
99 views

Best Practices - Exporting/Importing Windows 2008 file/folder permissions

I'm in the process of creating a secondary website on our webserver which I would like to have identical folder and (mostly) file permissions but completely different content. Ideally I would like to ...
0
votes
1answer
86 views

what permissions should my 'normal' users have to access my website?

Recently I was subject to a hack by "HACKED BY SyRSyR!4N M43STR0". Thankfully, no real damage. I am trying to figure out how they got in and was checking my permissions on some of my folders. I'm not ...
-1
votes
1answer
134 views

IIS 7.5 WordPress Site on Windows Server 2008 R2 Files uploaded have NO permissions [closed]

I am having a frustrating issue with IIS 7.5 on Windows 2008 R2. I am hosting a WordPress site on this server through IIS. When a user uploads anything to the site, it gets put into the ...
0
votes
0answers
27 views

Can access file when browsing from computer but not on server [closed]

As described above. When uploading an image from Wordpress, the file can be viewed when I try to access it from my computer and browse through to the server, but not when I try to access it from the ...
0
votes
1answer
388 views

Restrict IIS Web to a Local Group

I am having trouble getting my IIS 7.5 server on Windows 7 to have the security I want. I want a portal page that anyone can access, and on that page I will have links to virtual directories. I want ...
2
votes
1answer
145 views

MSDeploy - possible to call setAcl on multiple destinations in one go?

I'm building a nice little continuous integration environment for our development team, based on TeamCity. It's working rather nicely, as it can build a mix of .NET and PHP projects, and push them to ...
1
vote
3answers
183 views

There is anything to consider in change IIS Pool Identity to Network Service instead ApplicationPoolIdentity?

I'm facing a problem with IIS Pool Identity. I need to give right permissions to it user, but i cannot find the user that is setted to the IIS Pool Identity, that is ApplicationPoolIdentity. I find ...
2
votes
1answer
4k views

IIS 7.5 folder and web site permissions

Situation: test website created in IIS server manager basic settings/connect as: Application user authentication/anonymous authentication/edit: application pool identity physical path has "IIS ...
0
votes
1answer
215 views

Setting permissions to ApplicationPoolIdentity on Remote Machine

We've just added a new development server to our office network running Windows Web Server 2008 with IIS7.5 and SQL 2008 R2. We don't RDP to the server, instead we run IIS Manager and SQL Mgmt Studio ...
0
votes
1answer
239 views

IIS7.5 Password Protected Directory Exceptions

I am having issues accessing a Magento API, as the magento folder is password protected. Is there a way to add an exception to this, so that any request to the API is allowed, but all other requests ...
2
votes
1answer
91 views

is it ok to remove %machinename%\users from webroot windows 2008 R2 IIS 7.5

I asked a question here: new installation of windows 2008 R2 ... having permissions issues (everyone has access) last night about not being able to limit permissions to my web folders. It turns out ...
2
votes
1answer
102 views

new installation of windows 2008 R2 … having permissions issues (everyone has access)

I can not limit access to the IUSR user nor the IIS_IUSRS group at all....not even a different user that I tried for anonymous access. When I say IUSR below, I also mean I've tried adding the group ...
1
vote
1answer
154 views

applicationpool identity giving too much access to my web resources

I have a new windows 2008 R2 configuration and I just published a web site to it. I set it to an application pool that uses this identity: ApplicationPoolIdentity and played around with the NTFS ...
1
vote
2answers
71 views

Basic IIS7 permissions question

We have a website, with a file: www.example.com/apis/httpapi.asp This file is used by the site internally to make requests joining two systems on the website together (one is Classic ASP, the other ...
4
votes
3answers
11k views

Write access to EVERYONE works, IUSR, IIS_IUSRS, DefaultAppPool does not work. why?

Ok. Here we are trying to set up a Classic ASP website at IIS 7.5 in Windows Server 2008 R2. There is a folder named dbc under the website's root and it has a file which is used to read and write ...
2
votes
4answers
5k views

IIS 7.5 401.3 Access Denied

I am having this weird issue with IIS 7.5 on Windows 2008 R2 x64. I created a site in IIS and manually created a test file index.html and everything worked. When I try to do a deployment, I copy all ...
3
votes
3answers
3k views

Setting Up Win2008 R2 Server - IIS_IUSRS Permissions

I am setting up a web server and notice out the box it gives IIS_IUSRS read & execute (and as a result list folder contents) permissions on the wwwroot. I'm trying to make sure its secure as ...
3
votes
2answers
981 views

Windows Server 2008 R2 web site: problem with impersonation

I got a web site, who use Impersonation. When my anonymous user set to IUSR and the application pool identity set to NetworkService, some pages don't display. I get a blank page, with no error ...
1
vote
2answers
4k views

Configuration for FTP Site in IIS 7.5

I have setup an FTP site in IIS 7.5 with SSL using a self-signed certificate. I can login and view my view my virtual directories, which are all setup as UNC paths. The problem is that I cannot write ...