Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > september 2005 >

iis security : IUSR and IWAM accounts in Active Directory


Hiro
9/20/2005 7:41:06 AM
Our web servers (IIS 6/ WIN2k3) need access to a file server. I would like to
create the IUSR and IWAM accounts under active directory and grant access to
the web server through one of these accounts.
My questions regarding this setup are:

What rights do the IUSR and IWAM accounts need to do their jobs correctly?
Are there any white papers explaining this?
Chris Crowe [MVP]
9/22/2005 12:00:00 AM
Basically just add the accounts you create to the LOCAL machine group called
IIS_WPG

This will ensure that the accounts have the correct permission for the IIS
Worker Processes

Also you may need to grant rights to the new accounts (or the IIS_WPG) for
any writing to folders on the IIS Servers

--
Cheers

Chris

Chris Crowe [IIS MVP]
http://blog.crowe.co.nz


[quoted text, click to view]

AddThis Social Bookmark Button