1. System disk permission settings
C: Partition part:
c:\
administrators all (this folder, subfolders and files)
CREATOR OWNER All (only sub-files and files)
system all (this folder, subfolders and files)
IIS_WPG Create file/write data (only this folder)
IIS_WPG (this folder, subfolder and file)
Traverse folders/run files
List folders/read data
Read properties
Create folder/attach data
Read permissions
c:\Documents and Settings
administrators all (this folder, subfolders and files)
Power Users (This folder, subfolder and file)
Read and run
List folder directories
Read
SYSTEM all (this folder, subfolder and file)
C:\Program Files
administrators all (this folder, subfolders and files)
CREATOR OWNER All (only sub-files and files)
IIS_WPG (This folder, subfolder and file)
Read and run
List folder directories
Read
Power Users (this folder, subfolder and file)
Modify permissions
SYSTEM all (this folder, subfolder and file)
TERMINAL SERVER USER (this folder, subfolder and file)
Modify permissions
2. Website and virtual machine permission settings (such as website on E disk)
Note: We assume that all websites are in the E disk wwwsite directory and are created for each virtual machine.
A guest user with the user name vhost1...vhostn and a webuser group was created
, add all vhost users to this webuser group for easy management
E:\
Administrators all (this folder, subfolders and files)
E:\wwwsite
Administrators all (this folder, subfolders and files)
All systems (this folder, subfolders and files)
All services (this folder, subfolders and files)
E:\wwwsite\vhost1
Administrators all (this folder, subfolders and files)
All systems (this folder, subfolders and files)
vhost1 all (this folder, subfolders and files)
3. Data backup disk
The data backup disk is best specified that only one specific user has full operation permissions for it.
For example, the F disk is a data backup disk, we only specify that an administrator has full operation permissions for it.
4. Permission settings in other places
Please find these files on disk C and set the security settings only the specific administrator has full operation permissions.
The following files are only allowed to be accessed by administrators.
C: Partition part:
c:\
administrators all (this folder, subfolders and files)
CREATOR OWNER All (only sub-files and files)
system all (this folder, subfolders and files)
IIS_WPG Create file/write data (only this folder)
IIS_WPG (this folder, subfolder and file)
Traverse folders/run files
List folders/read data
Read properties
Create folder/attach data
Read permissions
c:\Documents and Settings
administrators all (this folder, subfolders and files)
Power Users (This folder, subfolder and file)
Read and run
List folder directories
Read
SYSTEM all (this folder, subfolder and file)
C:\Program Files
administrators all (this folder, subfolders and files)
CREATOR OWNER All (only sub-files and files)
IIS_WPG (This folder, subfolder and file)
Read and run
List folder directories
Read
Power Users (this folder, subfolder and file)
Modify permissions
SYSTEM all (this folder, subfolder and file)
TERMINAL SERVER USER (this folder, subfolder and file)
Modify permissions
2. Website and virtual machine permission settings (such as website on E disk)
Note: We assume that all websites are in the E disk wwwsite directory and are created for each virtual machine.
A guest user with the user name vhost1...vhostn and a webuser group was created
, add all vhost users to this webuser group for easy management
E:\
Administrators all (this folder, subfolders and files)
E:\wwwsite
Administrators all (this folder, subfolders and files)
All systems (this folder, subfolders and files)
All services (this folder, subfolders and files)
E:\wwwsite\vhost1
Administrators all (this folder, subfolders and files)
All systems (this folder, subfolders and files)
vhost1 all (this folder, subfolders and files)
3. Data backup disk
The data backup disk is best specified that only one specific user has full operation permissions for it.
For example, the F disk is a data backup disk, we only specify that an administrator has full operation permissions for it.
4. Permission settings in other places
Please find these files on disk C and set the security settings only the specific administrator has full operation permissions.
The following files are only allowed to be accessed by administrators.