Page 1 of 1

Scripting NTFS Perms IIS7

Posted: Thu Oct 11, 2007 7:09 am
by sam.e
Hi all,I was wondering how would I access setting NTFS permissions for the IUSR with IIS7 using VBscript? I've read that it is completely different than the annoying ways for IIS6. I think it probably involves some setting in web.config or applicationhost.config but I wasn't sure how to access the section or what it was called even.Any help would be great!Thanks!Sam

Scripting NTFS Perms IIS7

Posted: Thu Oct 11, 2007 7:09 am
by sam.e
Hi all,I was wondering how would I access setting NTFS permissions for the IUSR with IIS7 using VBscript? I've read that it is completely different than the annoying ways for IIS6. I think it probably involves some setting in web.config or applicationhost.config but I wasn't sure how to access the section or what it was called even.Any help would be great!Thanks!Sam

Scripting NTFS Perms IIS7

Posted: Thu Oct 11, 2007 11:26 am
by jvierra
Sam - your request doesn't make much sense. Can you describe what permissions you need to set.

IUSR is an account onn IIS that is ussed to proxy for the anonymous web user. It doesn't have any NTFS permissions.

IE7 has little to do with IUSR_machine account or with IISx.


Scripting NTFS Perms IIS7

Posted: Fri Oct 12, 2007 4:15 am
by donj
Folder permissions are set exactly the same way regardless of the IIS version you're using. IIS7 still uses the IUSR_* account (by default) to represent anonymous users; it still respects whatever NTFS file permissions are assigned to IUSR_*. Permissions are set on the files and folders, not through web.config or any other configuration file; IIS7 doesn't track file and folder permissions - it simply respects whatever permissions are set in Windows on those files and folders.

Scripting NTFS Perms IIS7

Posted: Fri Oct 12, 2007 5:16 am
by jvierra
I believe what may be confusing you is that ASP.NET uses teh "web.config" file to set the conditions and parameteres used for "authentication" providers. These values are settable via the WMI IIS provider is some cases. In other cases you can do direct updates to the config files via script assuming uyou are rnning from an account with proper permissions.. Chanhes to the web.config file tak affect immediately and cause a restart of the application instance.

Another area that can be confusing is that IIS5/6 use the metabase for many things to do with security and account control. IIS7 chnafges this inmany ways.

Also note tahat IIS7 can run as IIS6 "compatible" or as IIS7 as it can load either app environment. This accounts for much of the extendibility of IIS7. It is worth getting famiiar with this. See the IIS blog at: http://www.iis.net/default.aspx?tabid=1

Scripting NTFS Perms IIS7

Posted: Fri Oct 12, 2007 7:34 am
by jvierra
DOn't thnk there is a generic modify. I think it is write + delete.