"Mike Schwarz" <ctek@ctek.ch> wrote in message
news:uD2BPvj0EHA.2788@TK2MSFTNGP15.phx.gbl...
> i have deactivated guest group... as mentioned in several forums...

"Mike Schwarz" <ctek@ctek.ch> wrote in message
news:#5rIjei0EHA.2156@TK2MSFTNGP10.phx.gbl...
> hi
>
> i have installed a small script on a virtual web called explore.aspx
> this is able to explore my whole c:\ directory, as the user asp.net
> is a member of the group "Domain User / User" and this user
> does has read permission on the whole drive c:\
>
> how can i prevent this?
> is it necessary that asp.net user is member of "Domain User/Users" ?
>
> thankx for any tip/hint how to lock down my system

Mike Schwarz wrote:
> i have installed a small script on a virtual web called explore.aspx
> this is able to explore my whole c:\ directory, as the user asp.net
> is a member of the group "Domain User / User" and this user
> does has read permission on the whole drive c:\

> Mike Schwarz wrote:
> > i have installed a small script on a virtual web called explore.aspx
> > this is able to explore my whole c:\ directory, as the user asp.net
> > is a member of the group "Domain User / User" and this user
> > does has read permission on the whole drive c:\
>
> The ASPNET and IUSR_MACHINENAME accounts should only be members of the
> Guests group. Try that.
>
>

> "Mike Schwarz" <ctek@ctek.ch> wrote in message
> news:#5rIjei0EHA.2156@TK2MSFTNGP10.phx.gbl...
> > hi
> >
> > i have installed a small script on a virtual web called explore.aspx
> > this is able to explore my whole c:\ directory, as the user asp.net
> > is a member of the group "Domain User / User" and this user
> > does has read permission on the whole drive c:\
> >
> > how can i prevent this?
> > is it necessary that asp.net user is member of "Domain User/Users" ?
> >
> > thankx for any tip/hint how to lock down my system
>
> Is your IIS server also the domain controller?
>
>

wrote:

>i have installed a small script on a virtual web called explore.aspx
>this is able to explore my whole c:\ directory, as the user asp.net
>is a member of the group "Domain User / User" and this user
>does has read permission on the whole drive c:\
>
>how can i prevent this?

>is it necessary that asp.net user is member of "Domain User/Users" ?