Files and Permissions

Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist.

This appendix lists the detailed, minimum file permission settings that must be in place for Microsoft to perform as designed.

Installation Directory

The installation directory is C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60 by default.

Installation directory	User	Permissions
\ADMISAPI	Users Administrators SYSTEM	Read & Execute Full Control Full Control
\BIN	Users Administrators SYSTEM	Read & Execute Full Control Full Control
\CONFIG	Users Administrators SYSTEM	Read & Execute Full Control Full Control
\ISAPI	Users Administrators SYSTEM	Read & Execute Full Control Full Control
\TEMPLATE	Users Administrators SYSTEM	Read & Execute Full Control Full Control

Web Site Content Area

This listing is for a Web site content area of \inetpub\wwwroot.

Web site content area	User	Permissions
\inetpub Note: All directories enclosing the content root will grant LIST permissions to these accounts.
\inetpub\wwwroot\_vti_pvt	Users Administrators SYSTEM IIS_WPG Internet Guest Account (IUSR_*)	Read & Execute, Read Full Control Full Control Read & Execute, Read Special Permissions
web.config	Users Administrators SYSTEM IIS_WPG Internet Guest Account (IUSR_*)	Read & Execute, Read Full Control Full Control Read & Execute, Read, Special Permissions Special Permissions
wpresources\web.config	Users Administrators SYSTEM IIS_WPG IUSR_* Internet Guest Account (IUSR_*)	Read & Execute, Read Full Control Full Control Read & Execute, Read, Special Permissions Special Permissions

Windows Directory

also changes permissions for two folders in the Microsoft Windows directory (%WinDir%).

Windows directory	User	Permissions
%temp%	Administrators SYSTEM STS_WPG Network Service (for a domain controller only)	Full Control Full Control Read, Write Read, Write
%WinDir%\logfiles\STS	Administrators SYSTEM STS_WPG Network Service (for a domain controller only)	Full Control Full Control Read, Write Read, Write