Apache Security Configuration under Windows Server 2003

Installing Apache Apache under Window server2003 has the system permission by default. So we have to lower the right to Apache first.

Add Users. My Computer right-click Management--Local Users and groups

2. Open the Local security policy, administrative Tools, start, and select "Log in as a service" in User Rights assignment to add Apache users;

3. Computer Management Select the service, find the apache2.2, stop the service first, right-click Properties, select Login, switch the radio box from the local System account to this account

Click to browse to find Apache's account

4. Grant Apache install directory permissions

Each disk root directory, except Administror and system, gives the readable column directory permission for the Apache account of the root directory of the disk where the Apache installation directory resides

5. Configure the Apache virtual host so that the corresponding virtual host can only read the corresponding file directory

<virtualhost *:80>
DocumentRoot "d:/www/php"
ServerName 127.0.0.1
Serveralias 127.0.0.1
<directory "d:/www/php" >
Options FollowSymLinks execcgi
AllowOverride All
Order Allow,deny
Allow from all
Php_admin_value Open_basedir "d:/www/php/"
Php_admin_value Safe_mode on
</Directory>
</VirtualHost>

Apache Security Configuration under Windows Server 2003