PDA

View Full Version : Security issue when IIS web server account has write permission


Rashmir
03-17-2005, 12:28 PM
Hi all,
can any of you please say me about Security issue when IIS web server account has write permission on the specified folder.

Thanks and Regards
Rashmi

tboss132
03-17-2005, 06:13 PM
Hi, please could you rephrase your question? I don't understand what you mean.
Are you facing a security issue? Then tell us about the exact issue and we'll help you out.

Rashmir
03-18-2005, 11:50 AM
We need to create a file on a specified folder, to accomplish the task we need to give write permission to IIS user so our client is considered of security issue for the system.I wanted to know if IIS user is given a write permission to a folder will their be any security issues?

tboss132
03-18-2005, 12:26 PM
It depends. The person will be able to write to the specific folder but won't be able to write to any other folder he doesn't have permission to. Some people don't even reccommend write permissions at all. See here (http://windows.stanford.edu/docs/IISsecchecklist.htm)
q Remove NTFS write perms everywhere possible.