You can configure access permissions for specific Web sites, directories, and files. Unlike NTFS permissions, Web permissions affect everyone who tries to access your Web site. Web site permissions are not meant to be used in place of NTFS permissions, but are used in conj 21421l116v unction with them.
|
|
|
Note If Web site permissions conflict with NTFS permissions for a directory or file, the more restrictive settings are applied. |
u·
Credentials:
Membership in the Administrators group on the local computer.
u·
Tools:
Iis.msc.
As a security best practice, log on to your computer using an account that is not in the Administrators group, and then use the Run as command to run IIS Manager as an administrator. At the command prompt, type runas /user:administrative_accountname "mmc %systemroot%\system32\inetsrv\iis.msc".
|
|
To set permissions for Web content
In IIS Manager, right-click the Web Sites folder, Web site, directory, virtual directory, or file you want to configure, and click Properties.
On the Home Directory, Virtual Directory, or File property sheet, select or clear any of the following check boxes (if available), depending on the type of access you want to grant or deny:
u·
Script Source Access. Users
can access source files. If Read is selected, source
can be read, if Write is selected, source can be
written to. Script Source Access includes the source
code for scripts. This option is not available if neither Read
nor Write is selected.
u·
Read (selected by default).
Users can view directory or file content and properties.
u·
Write. Users can change
directory or file content and properties.
u·
Directory browsing. Users
can view file lists and collections.
u·
Log visits. A log entry is
created for each visit to the Web site.
u·
Index this resource. Allows
Indexing Service to index this resource. This allows searches to be performed
on the resource.
In the Execute Permissions list box, select the appropriate level of script execution:
u·
None Do
not run scripts or executables on the server.
u·
Scripts only Run only
scripts on the server.
u·
Scripts and Executables Run
both scripts and executables on the server.
Click OK. If child nodes for a directory have different Web site permissions configured, the Inheritance Overrides box appears.
If a child node belonging to the directory whose Web site permissions you have changed has also set the Web site permissions for a particular option, the permissions in the child node will override those you have set for the directory. If you want the Web site permissions at the directory level to apply to the child nodes, you must select those child nodes in the Inheritance Overrides box.
If the Inheritance Overrides box appears, select the child nodes in the Child Nodes list to which you want the directory's Web permissions to apply. You can also click Select All to set the property to apply the Web permissions to all child nodes.
You might see more than one Inheritance Overrides box if more than one property has been defined in the child nodes of the directory. Select the child nodes from the Child Nodes list or click Select All, and then click OK to apply the Web permissions for this property to the child nodes.
|
