General discussion

Locked

Permissions on web server

By bfeltus ·
I locked down our windows 2000 web server using the minimum file system permissions recommendations. The users could not access any applications (received page not found in browser window) from the web server. I tracked the problem to the C:\WINNT\SYSTEM32 folder. I gave Administrators, Creator Owner, and System full control. I gave the group Everyone read permissions. I had removed the users and power users groups. Well, I ended up putting the USERS GROUP back with full control. The users are able to bring up applications on the web server. Why do I need the users group instead of the everyone group. I do not want the users group to have full control. What's the minimum I can give the users groups in order for apps to be accessed.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Mark In reply to Permissions on web server

They shouldn't have to have full access there. It may be specific to the app. At least drop the rights to change. Remove Full control, cause they can take ownership then and change properties. It should still work. You might look for a temp folder or something there and move it.

You also might want to move the INetPub folder to another volume or location.

Now that I think about it, I had a similar issue once with the default website, but setting up the site on another volume and not being the default site cured it.

Collapse -

by bfeltus In reply to

Poster rated this answer.

Collapse -

by bfeltus In reply to Permissions on web server

This question was closed by the author

Back to Security Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums