I have an IIS6, and a CGI (.exe) web service I want to deploy.

I put the .exe in a virtual directory of it's own.

I understand I need to give execution rights in this directory, I want to
know if there is a way that I can prevent someone from putting another .exe
file in the same place and running it.



TIA



barak

You need to secure access to the server to prevent others from placing .exes
into that folder.

For example, prevent users from logging on and/or prevent users (via NTFS
permissions) from writing content to that folder.

Cheers
Ken

[quoted text, click to view]
:I have an IIS6, and a CGI (.exe) web service I want to deploy.
:
: I put the .exe in a virtual directory of it's own.
:
: I understand I need to give execution rights in this directory, I want to
: know if there is a way that I can prevent someone from putting another
..exe
: file in the same place and running it.
:
:
:
: TIA
:
:
:
: barak
:
:

By default, IIS6 does not allow any EXE to execute even if it is in a
directory with execution rights. It also requires a Web Service Extension to
unlock the ability on a per-EXE basis.

Thus, if you use the default security mechanisms, you should just enable
only the EXEs you want to execute. Thereafter, it does not matter if the
directory have execution rights -- unless the EXE is also enabled, it won't
be executed.

http://blogs.msdn.com/david.wang/archive/2005/07/11/Allow_file_downloads_on_IIS_6.aspx


Another approach would be to set the execute permission on a per-URL basis
instead of per-vdir (you still need Web Service Extension to allow the CGI
to execute. However, you do not need to put the .exe in a virtual directory
of its own nor does it need to exist in the web namespace, as I show in the
following blog entry:

http://blogs.msdn.com/david.wang/archive/2005/09/14/HOWTO_Use_IIsWebFile_to_Securely_Run_CGI_in_cgi_bin_from_the_root_directory_.aspx

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
I have an IIS6, and a CGI (.exe) web service I want to deploy.

I put the .exe in a virtual directory of it's own.

I understand I need to give execution rights in this directory, I want to
know if there is a way that I can prevent someone from putting another .exe
file in the same place and running it.



TIA



barak