#1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2011
    Posts
    1
    Rep Power
    0

    IIS - Restricting Access


    Hey guys,

    I'm faced with a situation where I have a number of IIS websites that need to be password protected, preferably with Windows Authentication. Additionally, I want users (except for administrators) to have access only to the specific website that I've granted them permission to access. Right now, I'm faced with the following problem: any user in the system can access any website. I figured this had to do with the fact that the website home directories are accessible by the Users group, and in fact, removing the Users group's access to these folders and selectively granting rights to the users I want solves the problem. However, due to the server-side scripting languages I use, I require that the Users group have access to the website folders. I've tried removing membership to the Users group of these users, but that seems to have no effect. Please let me know if you have any ideas, and thanks in advance for your help.

    Best,

    Protagoras
  2. #2
  3. No Profile Picture
    Grumpier old Moderator
    Devshed Supreme Being (6500+ posts)

    Join Date
    Jun 2003
    Posts
    14,424
    Rep Power
    4539
    Assign only the desired users/groups permissions to the directories in question.
    ======
    Doug G
    ======
    The man who doesn't read good books has no advantage over the man who can't read them.
    --Mark Twain

IMN logo majestic logo threadwatch logo seochat tools logo