List of NTFS Permissions Required for IIS Site to Work

ID: Q187506

The information in this article applies to:

Microsoft Internet Information Server version 4.0

SUMMARY

This article lists the proper Windows NT File System (NTFS) access permissions needed for an Internet Information Server (IIS) Web or FTP site to work.

NOTE: When IIS is installed, it creates the proper NTFS access permissions for the default Web and FTP sites for the anonymous (IUSR_<computer_name>) and, if applicable, application owner (IWAM_<computer_name>) user accounts.

If you try and access a Web Page that you do not have access to, you may receive the following error message:

HTTP Error 401 401.3 Unauthorized: Unauthorized due to ACL on resource.

MORE INFORMATION

Grant the IUSR_<computer_name>, and related groups (if any) the following directory permissions:


   Directory                    Permissions
   ----------------------------------------
   Inetpub\Wwwroot              READ (RX)

   Winnt                        READ (RX)

   Winnt\System32               READ (RX)

   Winnt\System32\Inetsrv       READ (RX)

   Winnt\System32\Inetsrv\Asp   READ (RX)
   (and all subdirectories)

   Program Files\Common Files   READ (RX)
   (and all subdirectories)

Description of Letters Used to Describe Permissions


   R = Read
   W = Write
   X = Execute
   D = Delete

For additional information, see the following topics in the Windows NT 4.0 Option Pack documentation:

Microsoft Internet Information Server

Server Administration

Security

Access Control

About Access Control

Microsoft Internet Information Server

Server Administration

Security

Access Control

Setting Access Permission for a Directory or File

Additional query words: acl access control list manager domains IUSR_<computername> IUSR_<machinename> IUSR_<machine_name> IWAM_<computername> IWAM_<machinename> IWAM_<machine_name> folder folders directories

Keywords :
Version : winnt:4.0
Platform : winnt
Issue type : kbinfo