Edit an ISAPI or CGI Restriction (IIS 7)
Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista
Edit an ISAPI or CGI restriction when you want to change the location or description of the .exe or .dll file, or the status of the restriction.
Note
Editing a configuration setting changes the setting at the local level and for any child levels that inherit the setting.
Prerequisites
For information about the levels at which you can perform this procedure, and the modules, handlers, and permissions that are required to perform this procedure, see ISAPI and CGI Restrictions Feature Requirements (IIS 7).
Exceptions to Feature Requirements
- None
To edit an ISAPI or CGI restriction
You can perform this procedure by using the user interface (UI), by running Appcmd.exe commands in a command-line window, by editing configuration files directly, or by writing WMI scripts.
User Interface
To use the UI
Open IIS Manager and navigate to the level you want to configure. For information about opening IIS Manager, see Open IIS Manager (IIS 7). For information about navigating to locations in the UI, see Navigation in IIS Manager (IIS 7).
In Features View, double-click ISAPI and CGI Restrictions.
Select a restriction from the list, and then click Edit in the Actions pane.
Optionally, in the Edit ISAPI or CGI Restriction dialog box, type the new path of the .dll or .exe file in the ISAPI or CGI path text box, or click the browse button (…) to navigate to the location of the file.
Optionally, in the Description text box, type a new description of the restriction.
Optionally, check Allow extension path of execute to allow the CGI or ISAPI program to run. If you do not check this option, the restriction status is Not Allowed, which is the default. You can change the restriction status later by selecting the restriction and clicking Allow or Deny in the Actions pane.
Click OK.
Command Line
To change an ISAPI or CGI restriction, use the following syntax:
appcmd set config /section:isapiCgiRestriction **/[path='string',description='string',allowed='True | False'].path | description | allowed:**string
The variable .path | description | allowed string is any single attribute you want to change followed by the new value. For example, to disable an ISAPI restriction named test.dll, type the following at the command prompt, and then press ENTER:
appcmd set config /section:isapiCgiRestriction /[path='%windir%\system32\inetsrv\test.dll'].allowed:False
Alternatively, to modify the description of an ISAPI restriction, type the following at the command prompt, and then press ENTER:
appcmd set config /section:isapiCgiRestriction /[path='%windir%\system32\inetsrv\test.dll'].description:"Test ISAPI Extension"
For more information about Appcmd.exe, see Appcmd.exe (IIS 7).
Configuration
The procedure in this topic affects the following configuration elements:
<add> under <isapiCgiRestriction>
For more information about IIS 7 configuration, see IIS 7.0: IIS Settings Schema on MSDN.
WMI
Use the following WMI classes, methods, or properties to perform this procedure:
- IsapiCgiRestrictionSection.IsapiCgiRestriction property
For more information about WMI and IIS, see Windows Management Instrumentation (WMI) in IIS 7. For more information about the classes, methods, or properties associated with this procedure, see the IIS WMI Provider Reference on the MSDN site.