.NET Framework Security

IIS Security Settings—A Refresher

At its lowest level, IIS, like any other Web server, is basically a file server. A client, usually a Web browser, makes a request and the server sends the file. What happens between these two actions can vary widely. Looking at IIS in this way, it becomes easy to understand that the basis for IIS Security is the way you have configured file access permissions on your server. Only through proper file access configuration will any of the features of IIS, and for that matter ASP.NET, be as effective as they were intended. Right-clicking a file, directory, or drive and selecting Properties from the menu allows easy access to the settings referred to in this paragraph. Files and directories should only have users ...