Configuring Directory Browsing in IIS 7
Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista
If directory browsing is enabled for a directory in Internet Information Services (IIS), users receive a page that lists the contents of the directory when the following are true:
The Default Documents feature is disabled in IIS. Or, if the Default Documents feature is enabled, IIS is unable to locate a file in the directory that matches a name specified in the IIS default document list.
By default, directory browsing is disabled in IIS so that users cannot see the contents of directories. To enhance security, you should leave directory browsing disabled unless you have a specific reason to enable it. If you enable directory browsing, make sure that you only enable it on the particular directory or directories that you want to share.
For information about the levels at which you can perform these procedures, and the modules, handlers, and permissions that are required for these procedures, see Directory Browsing Feature Requirements in IIS 7.
This task includes the following procedures: