Files and Permissions

Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist.

This appendix lists the detailed, minimum file permission settings that must be in place for Microsoft to perform as designed.

Installation Directory

The installation directory is C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60 by default.

Installation directory

User

Permissions

\ADMISAPI

Users

Administrators

SYSTEM

Read & Execute

Full Control

Full Control

\BIN

Users

Administrators

SYSTEM

Read & Execute

Full Control

Full Control

\CONFIG

Users

Administrators

SYSTEM

Read & Execute

Full Control

Full Control

\ISAPI

Users

Administrators

SYSTEM

Read & Execute

Full Control

Full Control

\TEMPLATE

Users

Administrators

SYSTEM

Read & Execute

Full Control

Full Control

Web Site Content Area

This listing is for a Web site content area of \inetpub\wwwroot.

Web site content area

User

Permissions

\inetpub

Note: All directories enclosing the content root will grant LIST permissions to these accounts.

   

\inetpub\wwwroot\_vti_pvt

Users

Administrators

SYSTEM

IIS_WPG

Internet Guest Account (IUSR_*)

Read & Execute, Read

Full Control

Full Control

Read & Execute, Read

Special Permissions

web.config

Users

Administrators

SYSTEM

IIS_WPG

Internet Guest Account (IUSR_*)

Read & Execute, Read

Full Control

Full Control

Read & Execute, Read, Special Permissions

Special Permissions

wpresources\web.config

Users

Administrators

SYSTEM

IIS_WPG

IUSR_*

Internet Guest Account (IUSR_*)

Read & Execute, Read

Full Control

Full Control

Read & Execute, Read, Special Permissions

Special Permissions

Windows Directory

also changes permissions for two folders in the Microsoft Windows directory (%WinDir%).

Windows directory

User

Permissions

%temp%

Administrators

SYSTEM

STS_WPG

Network Service (for a domain controller only)

Full Control

Full Control

Read, Write

Read, Write

%WinDir%\logfiles\STS

Administrators

SYSTEM

STS_WPG

Network Service (for a domain controller only)

Full Control

Full Control

Read, Write

Read, Write

Show: