Groups | Blog | Home
all groups > iis security > december 2005 >

iis security : IIS 5.1 (WinXP Pro) not accepting file permissions.



lsproc
12/13/2005 9:33:02 AM
I am using IIS to test some software (mainly YaBB and other free forum
software) however YaBB is complaining that it can not write to its files in
the cgi-bin directory. I looked at the file permissions in the MMC snapin and
it is reporting that Script write access, Read Access, Write Access, Logging
and Indexing are enabled. It also said that Scripts have permissions to run.
However I am still getting the write problems. I tested the EasyMod extension
for phpbb that relies on write access and it reports that there is no write
access. I do not have FrontPage extensions but I do have ASP.NET 1.1 and 2.0.
Plus I am using MMC 3.0 RC1. I only got this problem quite recently. Before
that it worked fine (apart from I had problems connecting remotely. I think
that was caused by the lockdown tool). Could someone help me please. (On
another note will it be possible to backport IIS 6 to WinXP Pro. Its a tad
lsproc
12/13/2005 11:01:02 PM


[quoted text, click to view]

Thanks! Ill try that. Ill just need to make sure there is no password for
Ken Schaefer
12/14/2005 12:58:41 PM
You probably need to check NTFS permissions *not* the IIS Write Permission
(which is mainly used for WebDAV). Uncheck "Write" access in IIS Manager,
and verify that your NTFS permissions are correct. To do this, right-click
on the folder in question in Explorer and choose Properties -> Security tab.
If you can't see a security tab, disable Simple Filesharing first (in
Explorer Tools -> Folder options -> uncheck "use simple file sharing
(recommended)"

In answer to your second question - IIS6 will not be backported to WinXP. It
relies on certain system functionality that does not exist in XP

Cheers
Ken

[quoted text, click to view]
:I am using IIS to test some software (mainly YaBB and other free forum
: software) however YaBB is complaining that it can not write to its files
in
: the cgi-bin directory. I looked at the file permissions in the MMC snapin
and
: it is reporting that Script write access, Read Access, Write Access,
Logging
: and Indexing are enabled. It also said that Scripts have permissions to
run.
: However I am still getting the write problems. I tested the EasyMod
extension
: for phpbb that relies on write access and it reports that there is no
write
: access. I do not have FrontPage extensions but I do have ASP.NET 1.1 and
2.0.
: Plus I am using MMC 3.0 RC1. I only got this problem quite recently.
Before
: that it worked fine (apart from I had problems connecting remotely. I
think
: that was caused by the lockdown tool). Could someone help me please. (On
: another note will it be possible to backport IIS 6 to WinXP Pro. Its a tad
: annoying having to use old software).

lsproc
12/15/2005 10:37:10 PM
I know. There seemed to be a lot of users. Which one do I have to set it for.
There was a lot of unknown users that had the ActivePerl icon.

Now I have changed the setting can I still use the permissions in the snapin
to control permissions for the folders in my site?

[quoted text, click to view]
Ken Schaefer
12/16/2005 11:31:01 AM

[quoted text, click to view]
:
:
[quoted text, click to view]
:
: > You probably need to check NTFS permissions *not* the IIS Write
Permission
: > (which is mainly used for WebDAV). Uncheck "Write" access in IIS
Manager,
: > and verify that your NTFS permissions are correct. To do this,
right-click
: > on the folder in question in Explorer and choose Properties -> Security
tab.
: > If you can't see a security tab, disable Simple Filesharing first (in
: > Explorer Tools -> Folder options -> uncheck "use simple file sharing
: > (recommended)"
: >
: > In answer to your second question - IIS6 will not be backported to
WinXP. It
: > relies on certain system functionality that does not exist in XP
: >
: > Cheers
: > Ken
: >
[quoted text, click to view]
: > :I am using IIS to test some software (mainly YaBB and other free forum
: > : software) however YaBB is complaining that it can not write to its
files
: > in
: > : the cgi-bin directory. I looked at the file permissions in the MMC
snapin
: > and
: > : it is reporting that Script write access, Read Access, Write Access,
: > Logging
: > : and Indexing are enabled. It also said that Scripts have permissions
to
: > run.
: > : However I am still getting the write problems. I tested the EasyMod
: > extension
: > : for phpbb that relies on write access and it reports that there is no
: > write
: > : access. I do not have FrontPage extensions but I do have ASP.NET 1.1
and
: > 2.0.
: > : Plus I am using MMC 3.0 RC1. I only got this problem quite recently.
: > Before
: > : that it worked fine (apart from I had problems connecting remotely. I
: > think
: > : that was caused by the lockdown tool). Could someone help me please.
(On
: > : another note will it be possible to backport IIS 6 to WinXP Pro. Its a
tad
: > : annoying having to use old software).
: >
: >
: >
:
: Thanks! Ill try that. Ill just need to make sure there is no password for
: the file sharing. I think a 2 layer firewall and WPA is good enough.


File sharing is not involved, and have nothing to do with this.

Cheers
Ken

Ken Schaefer
12/17/2005 2:51:10 PM
You need to use whatever account IIS is impersonating. Generally this is
probably IUSR_<machinename>, but could be other accounts. You can use
Filemon from www.sysinternals.com to find out which account is being used to
access the disk.

Cheers
Ken

[quoted text, click to view]
:I know. There seemed to be a lot of users. Which one do I have to set it
for.
: There was a lot of unknown users that had the ActivePerl icon.
:
: Now I have changed the setting can I still use the permissions in the
snapin
: to control permissions for the folders in my site?
:
[quoted text, click to view]
:
: >
[quoted text, click to view]
: > :
: > :
[quoted text, click to view]
: > :
: > : > You probably need to check NTFS permissions *not* the IIS Write
: > Permission
: > : > (which is mainly used for WebDAV). Uncheck "Write" access in IIS
: > Manager,
: > : > and verify that your NTFS permissions are correct. To do this,
: > right-click
: > : > on the folder in question in Explorer and choose Properties ->
Security
: > tab.
: > : > If you can't see a security tab, disable Simple Filesharing first
(in
: > : > Explorer Tools -> Folder options -> uncheck "use simple file sharing
: > : > (recommended)"
: > : >
: > : > In answer to your second question - IIS6 will not be backported to
: > WinXP. It
: > : > relies on certain system functionality that does not exist in XP
: > : >
: > : > Cheers
: > : > Ken
: > : >
[quoted text, click to view]
: > : > :I am using IIS to test some software (mainly YaBB and other free
forum
: > : > : software) however YaBB is complaining that it can not write to its
: > files
: > : > in
: > : > : the cgi-bin directory. I looked at the file permissions in the MMC
: > snapin
: > : > and
: > : > : it is reporting that Script write access, Read Access, Write
Access,
: > : > Logging
: > : > : and Indexing are enabled. It also said that Scripts have
permissions
: > to
: > : > run.
: > : > : However I am still getting the write problems. I tested the
EasyMod
: > : > extension
: > : > : for phpbb that relies on write access and it reports that there is
no
: > : > write
: > : > : access. I do not have FrontPage extensions but I do have ASP.NET
1.1
: > and
: > : > 2.0.
: > : > : Plus I am using MMC 3.0 RC1. I only got this problem quite
recently.
: > : > Before
: > : > : that it worked fine (apart from I had problems connecting
remotely. I
: > : > think
: > : > : that was caused by the lockdown tool). Could someone help me
please.
: > (On
: > : > : another note will it be possible to backport IIS 6 to WinXP Pro.
Its a
: > tad
: > : > : annoying having to use old software).
: > : >
: > : >
: > : >
: > :
: > : Thanks! Ill try that. Ill just need to make sure there is no password
for
: > : the file sharing. I think a 2 layer firewall and WPA is good enough.
: >
: >
: > File sharing is not involved, and have nothing to do with this.
: >
: > Cheers
: > Ken
: >
: >
: >

AddThis Social Bookmark Button