ISAPI and CGI Restrictions

Article
08/31/2016

Applies To: Windows Server 2012 R2, Windows Server 2012

Use the ISAPI and CGI Restrictions feature page to manage a list of restrictions to ISAPI and CGI programs.

Sort the list by clicking one of the feature page column headings or select a value from the Group by drop-down list to group similar items.

Related scenarios

In this document

UI Elements for ISAPI and CGI Restrictions

The following tables describe the UI elements that are available on the feature page and in the Actions pane.

Feature Page Elements

Element Name	Description
Description	Lists the description of the ISAPI or CGI program.
Restriction	Shows whether the specific program is allowed to run.
Path	Shows the path of the .dll or .exe file.

Actions Pane Elements

Element Name	Description
Add	Opens the Add ISAPI or CGI Restriction dialog box from which you can manage restrictions to CGI (.exe) or ISAPI (.dll) programs.
Deny	Specifies the restriction setting for a CGI (.exe) or ISAPI (.dll) program. This action is available only when an item is selected from the list on the feature page.
Allow	Specifies the restriction setting for a CGI (.exe) or ISAPI (.dll) program. This action is available only when an item is selected from the list on the feature page.
Edit	Opens the Edit ISAPI or CGI Restriction dialog box from which you can manage restrictions to CGI (.exe) or ISAPI (.dll) programs. This action is available only when an item is selected from the list on the feature page.
Remove	Removes the item that is selected from the list on the feature page.
Edit Feature Settings	Opens the Edit ISAPI and CGI Restrictions Settings dialog box from which you can configure settings that apply to the entire ISAPI and CGI restrictions feature.

Add or Edit ISAPI or CGI Restriction Dialog Box

Use the Add ISAPI or CGI Restriction and Edit ISAPI or CGI Restriction dialog boxes to manage restrictions for CGI (.exe) and ISAPI (.dll) programs.

Element Name	Description
ISAPI or CGI path	Type the physical path to the ISAPI extension or CGI program.
Description	Provide a brief description of the program.
Allow extension path to execute	Select this option to enable this program to run.

Edit ISAPI and GCI Restrictions Settings Dialog Box

Use the Edit ISAPI and CGI Restrictions Settings dialog box to enable unspecified CGI or ISAPI modules to run. If you leave these settings unchanged, only the CGI or ISAPI modules specifically listed can run on this server.

Warning

Enabling either Allow unspecified CGI modules or Allow unspecified ISAPI modules is a security risk. Your server could become susceptible to computer viruses or worms that exploit CGI or ISAPI technologies. To reduce this risk, you should create specific restrictions for all ISAPI extensions or CGI files that must run on your server.

Element Name	Description
Allow unspecified CGI modules	Enables unspecified CGI modules to run on this server.
Allow unspecified ISAPI modules	Enables unspecified ISAPI modules to run on this server.

Share via