Directories and subdirectories permissions -- iis security

Alan Wen
11/23/2005 12:04:06 PM

IIS6 - Windows 2003 Ent.

I have an FTP site with numerous hundreds of directories/contents. I do not
want the user to be able to traverse up a folder and see all this content -
I just want them to see the content of the link I send them - they would not
know the other folders that are in the same level they are in. How do I do
this? Please help. Thank you.

Miha Pihler [MVP]
11/23/2005 9:38:54 PM

Hi Alan,

One way of doing this is by assigning NTFS permissions. IIS will always
honor NTFS permissions.

Note: folder has e.g. Authenticated Users assigned with Read permission it
will still give user enough permission to read the folder. In short you will
have to remove all other permissions except e.g. Administrators for the FTP
and then assign permissions to the folder where user is supposed to have
access to...

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

iis security : Directories and subdirectories permissions