Why everyone?

[Karl Mikesell]

When setting up ASP.NET directories on web server (physical), why is the
"everyone" group read permission required where a web.config files exists
(.aspx or .asmx)

Why not just IUSR_*

I try to eliminate everyone from everything; but I cannot with ASP.NET, how
to audit ASP.NET object access?

Need to know who.

[Karl Mikesell]

Thank you for the help

Removed everyone, added IIS_WPG and everything is working.

Karl

"Michal A. Valasek" <news@altaircom.net> wrote in message
news:uONIcxOWDHA.2476@tk2msftngp13.phx.gbl...

> | When setting up ASP.NET directories on web server (physical), why is the
> | "everyone" group read permission required where a web.config files

exists

> | (.aspx or .asmx)
>
> Is not required. Only the worker processes need to access this file. On
> W2003 it's by default the IIS_WPG group.
>
> --
> Michal A. Valasek, Altair Communications, [url]http://www.altaircom.net[/url]
> Please do not reply to this e-mail, for contact see [url]http://www.rider.cz[/url]
>
>