System Disk C: Of course, the most important.
I: Drive C gives administrator and system permissions, with full control
II: C \ Documents and Settings, c: \ inetpub gives administrator and system permissions, full control, does not inherit the parent
III. C: \ Program Files grant full control to the Administrator and system, instead of inheriting the parent, all sub-objects are replaced.
Thu: C: \ Program Files \ common files give administrator and system permissions, full control, add guests, iis_wpg, and grant the following permissions (traverse folders/running files, list folders/read data, read data, read extended attributes, read permissions), do not inherit the parent, replace all sub-objects. in this way, Asp has the FSO and object creation permissions.
V. C: \ Windows: grant administrator and system permissions, full control, add guests, iis_wpg, and Asp.net, and grant the following permissions (traverse folders/running files, list folders/read data, read data, read extended attributes, read permissions), do not inherit the parent, replace all sub-objects.
VI. C: \ Windows \ Temp grant full control to the Administrator and system permissions. Add guests, iis_wpg, and Asp.net. Full control. do not inherit the parent. replace all sub-objects, this is because the website wants to update temporary files, so it has not found any other method for all permissions.
7. The c: \ windows \ Microsoft. NET permission is not changed. All Sub-objects are replaced with the permission,
8: C: \ WINDOWS \ Microsoft. NET \ framework \ v1.1.4322 \ temporary ASP. NET files
Give administrator and system permissions, full control, add guests, iis_wpg, Asp.net, full control (delete this item can be removed), do not inherit the parent, replace all sub-objects, the same principle, this directory is the temporary component DLL that has browsed the website, and there is no better solution for the moment.
Of course, in windows, cmd. EXE and net. EXE are only fully controlled by the Administrator and system.