Share via


AccessFlags

The AccessFlags property contains flags for configuring file access permissions, which are defined in the Flags section. The last four flags augment the first four flags in that they relate to access granted to remote computers. You can enable local access without remote access, but you cannot enable remote access without local access.

Attribute Name Attribute Value
XML Data Type DWORD
WMI Data Type
SINT32
ADSI Data Type DWORD
ABO Data Type DWORD
ABO Metabase identifier
MD_ACCESS_PERM
Attributes INHERIT
Default Value accessread
MetaFlagsEx CACHE_PROPERTY_MODIFIED
User Type IIS_MD_UT_FILE
StartingNumber Not applicable
EndingNumber 0
ID 6016

Configurable Locations

You can configure this property at the following locations in the IIS metabase.

Metabase Path IIS Admin Object Type
/LM/W3SVC/n/ROOT
/LM/W3SVC/n/ROOT/virtual_directory_name
IIsWebVirtualDir
/LM/W3SVC/n IIsWebServer
/LM/MSFTPSVC/n IIsFtpServer
/LM/W3SVC IIsWebService
/LM/MSFTPSVC IIsFtpService
/LM/W3SVC/n/ROOT/file_name
/LM/W3SVC/n/ROOT/virtual_directory_name/file_name
IIsWebFile
/LM/W3SVC/n/ROOT/physical_directory_name
/LM/W3SVC/n/virtual_directory_name/physical_directory_name
IIsWebDirectory
/LM/MSFTPSVC/n/ROOT
/LM/MSFTPSVC/n/ROOT/virtual_directory_name
IIsFtpVirtualDir
/LM/NNTPSVC IIsNntpService
/LM/NNTPSVC/n IIsNntpServer
/LM/NNTPSVC/n/ROOT
/LM/NNTPSVC/n/ROOT/virtual_directory_name
IIsNntpVirtualDir
/LM/SMTPSVC IIsSmtpService
/LM/SMTPSVC/n IIsSmtpServer
/LM/SMTPSVC/n/ROOT
/LM/SMTPSVC/n/ROOT/virtual_directory_name
IIsSmtpVirtualDir

Flags

Flag Name AccessExecute
Description
A value of true indicates that the file or the contents of the folder may be executed, regardless of file type.
Metabase Bitmask Identifier MD_ACCESS_EXECUTE
Decimal Value 4
Hex Value 0x00000004
Flag Name AccessSource
Description
A value of true indicates that users are allowed to access source code if either Read or Write permissions are set. Source code includes scripts in ASP applications.
Metabase Bitmask Identifier
Decimal Value 16
Hex Value 0x00000010
Flag Name AccessRead
Description
A value of true indicates that the file or the contents of the folder may be read through Internet Explorer.
Metabase Bitmask Identifier MD_ACCESS_READ
Decimal Value 1
Hex Value 0x00000001
Flag Name AccessWrite
Description
A value of true indicates that users are allowed to upload files and their associated properties to the enabled directory on your server or to change content in a Write-enabled file. Write can only be done only with a browser that supports the PUT feature of the HTTP 1.1 protocol standard.
Metabase Bitmask Identifier MD_ACCESS_WRITE
Decimal Value 2
Hex Value 0x00000002
Flag Name AccessScript
Description
A value of true indicates that the file or the contents of the folder may be executed if they are script files or static content. A value of false only allows static files such as HTML files to be served.
Metabase Bitmask Identifier MD_ACCESS_SCRIPT
Decimal Value 512
Hex Value 0x00000200
Flag Name AccessNoRemoteExecute
Description A value of true indicates that remote requests to execute applications are denied; only requests from the same computer as the IIS server succeed if the AccessExecute property is set to true. You cannot set AccessNoRemoteExecute to false to enable remote requests, and set AccessExecute to false to disable local requests.
Metabase Bitmask Identifier MD_ACCESS_NO_REMOTE_EXECUTE
Decimal Value 1024
Hex Value 0x00000400
Flag Name AccessNoRemoteRead
Description A value of true indicates that remote requests to view files are denied; only requests from the same computer as the IIS server succeed if the AccessRead property is set to true. You cannot set AccessNoRemoteRead to false to enable remote requests, and set AccessRead to false to disable local requests.
Metabase Bitmask Identifier MD_ACCESS_NO_REMOTE_READ
Decimal Value 4096
Hex Value 0x00001000
Flag Name AccessNoRemoteWrite
Description A value of true indicates that remote requests to create or change files are denied; only requests from the same computer as the IIS server succeed if the AccessWrite property is set to true. You cannot set AccessNoRemoteWrite to false to enable remote requests, and set AccessWrite to false to disable local requests.
Metabase Bitmask Identifier MD_ACCESS_NO_REMOTE_WRITE
Decimal Value 1024
Hex Value 0x00000400
Flag Name AccessNoRemoteScript
Description A value of true indicates that remote requests to view dynamic content are denied; only requests from the same computer as the IIS server succeed if the AccessScript property is set to true. You cannot set AccessNoRemoteScript to false to enable remote requests, and set AccessScript to false to disable local requests.
Metabase Bitmask Identifier MD_ACCESS_NO_REMOTE_SCRIPT
Decimal Value 16384
Hex Value 0x00004000

Code Example

For general code examples, please see Code Examples to Configure Metabase Properties