.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
New Asp.net Web site ACL security permissions
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngsec' list.


Chuck Peper
I have an IIS server on w2k. I am setting up a new web
site, which will have the web files located on a different
drive than wwwroot.

I installed the new ip, created the web site, re-ran
aspnet_regiis.exe -i (I think you have to do this whenever
you install a new website to get the aspnet_client
directory installed).

The question is what are the ACLs needed on the website's
directories? Is there any security documentation on this?
.
Reply to this message...
 
    
Brad Kingsley
The account that ASP.Net runs as (ASPNET by default) and the account that
the web site runs under (also ASPNET by default) need to have at least read
access to the web content folders and the parent folders.

~Brad Kingsley
Microsoft MVP - ASP
Windows 2000 MCSE

http://www.orcsweb.com/
Powerful Web Hosting Solutions
#1 in Service and Support

----- Original Message -----
From: "Chuck Peper" <Click here to reveal e-mail address>
Newsgroups: aspngsec
To: "aspngsec" <Click here to reveal e-mail address>
Sent: Monday, July 22, 2002 10:06 AM
Subject: [aspngsec] New Asp.net Web site ACL security permissions

[Original message clipped]
Reply to this message...
 
    
Ely Lucas
If you are running under the ASPNET account ( <processModel
userName="machine" password="AutoGenerate" /> ) Then the ASPNET user needs
Read permissions to your aspx files. If you are running impersonation, then
your impersonated user needs Read access to the aspx files, as well as Read
access to the c:\winnt\Microsoft.Net, and write access to the Temporary
ASP.NET Files directory, plus whatever access needed in order to run IIS in
the first place.

Thanks,
Ely

-----Original Message-----
From: Chuck Peper [mailto:Click here to reveal e-mail address]
Sent: Monday, July 22, 2002 8:07 AM
To: aspngsec
Subject: [aspngsec] New Asp.net Web site ACL security permissions

I have an IIS server on w2k. I am setting up a new web
site, which will have the web files located on a different
drive than wwwroot.

I installed the new ip, created the web site, re-ran
aspnet_regiis.exe -i (I think you have to do this whenever
you install a new website to get the aspnet_client
directory installed).

The question is what are the ACLs needed on the website's
directories? Is there any security documentation on this?
.

| [aspngsec] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngsec.asp = JOIN/QUIT
| http://www.asplists.com/search = SEARCH Archives
Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification