Scripting NTFS Perms IIS7

Anything VBScript-related, including Windows Script Host, WMI, ADSI, and more.
Forum rules
Do not post any licensing information in this forum.

Any code longer than three lines should be added as code using the 'Select Code' dropdown menu or attached as a file.
Locked
User avatar
sam.e
Posts: 3
Joined: Wed Sep 26, 2007 6:55 am

Scripting NTFS Perms IIS7

Post by sam.e » Thu Oct 11, 2007 7:09 am

Hi all,I was wondering how would I access setting NTFS permissions for the IUSR with IIS7 using VBscript? I've read that it is completely different than the annoying ways for IIS6. I think it probably involves some setting in web.config or applicationhost.config but I wasn't sure how to access the section or what it was called even.Any help would be great!Thanks!Sam

User avatar
sam.e
Posts: 3
Joined: Wed Sep 26, 2007 6:55 am

Scripting NTFS Perms IIS7

Post by sam.e » Thu Oct 11, 2007 7:09 am

Hi all,I was wondering how would I access setting NTFS permissions for the IUSR with IIS7 using VBscript? I've read that it is completely different than the annoying ways for IIS6. I think it probably involves some setting in web.config or applicationhost.config but I wasn't sure how to access the section or what it was called even.Any help would be great!Thanks!Sam

User avatar
jvierra
Posts: 13717
Joined: Tue May 22, 2007 9:57 am
Contact:

Scripting NTFS Perms IIS7

Post by jvierra » Thu Oct 11, 2007 11:26 am

Sam - your request doesn't make much sense. Can you describe what permissions you need to set.

IUSR is an account onn IIS that is ussed to proxy for the anonymous web user. It doesn't have any NTFS permissions.

IE7 has little to do with IUSR_machine account or with IISx.


User avatar
donj
Posts: 416
Joined: Thu Nov 16, 2006 9:02 pm

Scripting NTFS Perms IIS7

Post by donj » Fri Oct 12, 2007 4:15 am

Folder permissions are set exactly the same way regardless of the IIS version you're using. IIS7 still uses the IUSR_* account (by default) to represent anonymous users; it still respects whatever NTFS file permissions are assigned to IUSR_*. Permissions are set on the files and folders, not through web.config or any other configuration file; IIS7 doesn't track file and folder permissions - it simply respects whatever permissions are set in Windows on those files and folders.

User avatar
jvierra
Posts: 13717
Joined: Tue May 22, 2007 9:57 am
Contact:

Scripting NTFS Perms IIS7

Post by jvierra » Fri Oct 12, 2007 5:16 am

I believe what may be confusing you is that ASP.NET uses teh "web.config" file to set the conditions and parameteres used for "authentication" providers. These values are settable via the WMI IIS provider is some cases. In other cases you can do direct updates to the config files via script assuming uyou are rnning from an account with proper permissions.. Chanhes to the web.config file tak affect immediately and cause a restart of the application instance.

Another area that can be confusing is that IIS5/6 use the metabase for many things to do with security and account control. IIS7 chnafges this inmany ways.

Also note tahat IIS7 can run as IIS6 "compatible" or as IIS7 as it can load either app environment. This accounts for much of the extendibility of IIS7. It is worth getting famiiar with this. See the IIS blog at: http://www.iis.net/default.aspx?tabid=1

User avatar
jvierra
Posts: 13717
Joined: Tue May 22, 2007 9:57 am
Contact:

Scripting NTFS Perms IIS7

Post by jvierra » Fri Oct 12, 2007 7:34 am

DOn't thnk there is a generic modify. I think it is write + delete.

Locked