Hard disk or folder: C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index
Main permissions part: Other permissions part:
Administrators
Complete control Users
Read and run
This folder, subfolder and file This folder, subfolder and file
<Not inherited> <Inherited from the previous folder>
SYSTEM
Complete control Users
Create file/write data
Create folder/attach data
Write properties
Write extended properties
Read permissions
This folder, subfolder and file only
<Not inherited> <Not inherited>
Users
Create file/write data
Create folder/attach data
Write properties
Write extended attributes
Only this subfolder and file
<Not inherited>
Hard disk or folder: C:\Documents and Settings\All Users\DRM
Main permissions part: Other permissions part:
Here we need to prohibit all GUEST user groups and IIS access user groups.
Everyone has special permissions, and it has been brought in after installation by default.
The main thing is to prohibit the user groups accessed by IIS plus all permissions.
Users
Read and run
This folder, subfolder and file
<Not inherited>
Guests
Reject all
This folder, subfolder and file
<Not inherited>
Guest
Reject all
This folder, subfolder and file
<Not inherited>
IUSR_XXX
or a virtual host user group
Reject all
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Documents and Settings\All Users\Documents (Shared Documents)
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files
Main permissions part: Other permissions part:
Administrators
Complete control IIS_WPG
Read and run
This folder, subfolder and file This folder, subfolder and file
<Not inherited> <Not inherited>
CREATOR OWNER
Complete control IUSR_XXX
or a virtual host user group
List folders/read data: reject
Only subfolders and files. This folder, subfolders and files.
<Not inherited> <Not inherited>
SYSTEM
Complete control The IIS virtual host user group prohibits the listing of directories, which can effectively prevent FSO-like *s
If aspjepg and aspupload are installed
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Common Files
Main permissions part: Other permissions part:
Administrators
Complete control IIS_WPG
Read and run
This folder, subfolder and file This folder, subfolder and file
<Not inherited> <Inherited from the previous directory>
CREATOR OWNER
Complete control Users
Read and run
Only subfolders and files. This folder, subfolders and files.
<Not inherited> <Not inherited>
SYSTEM
Full control of composite permissions to provide a fast and safe operating environment for IIS
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Common Files\Microsoft Shared\web server extensions
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Microsoft SQL Server\MSSQL (The program part is installed on the C: disk by default)
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
Hard disk or folder: E:\Program Files\Microsoft SQL Server (The database part is installed on the E: disk)
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: E:\Program Files\Microsoft SQL Server\MSSQL (The database part is installed on the E: disk)
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Internet Explorer\
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Outlook Express
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\PowerEasy5 (if the Dongyi component is installed)
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Radmin (If Radmin remote control is installed)
Main permissions part: Other permissions part:
Administrators
Complete control None
There are two files in the corresponding c:\windows\system32
r_server.exe and
To remove Users' read run permission
The default permissions are only available for administrators and system.
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Serv-U (If the Serv-U server is installed)
Main permissions part: Other permissions part:
Administrators
Complete control None
This is often a relatively large loophole in the invasion of power raising
Must follow this method to set it
Directory name may also be based on Serv-U version
C:\Program Files\\Serv-U
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Windows Media Player
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\Windows NT\Accessories
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Hard disk or folder: C:\Program Files\WindowsUpdate
Main permissions part: Other permissions part:
Administrators
Complete control None
This folder, subfolder and file
<Not inherited>
CREATOR OWNER
Complete control
Only subfolders and files
<Not inherited>
SYSTEM
Complete control
This folder, subfolder and file
<Not inherited>
Previous page123456789Next pageRead the full text