Build a virtual host from FSO threats (III)

The "security" Warning shown in is displayed. Click "delete ":



In this case, all the groups and users in the Security tab will be cleared (if not, use "delete" to clear it), and then click "add.



Adding the "Administrator" and the newly created account "IUSR_VHOST1" as shown in will grant full control permissions. You can also add other groups or users as needed, but do not add anonymous access accounts such as "Guests" and "IUSR _ machine name!



Switch to the "First VM properties" dialog box that is opened earlier, open the "Directory Security" tab, and click "edit" for anonymous access and verification control ":



In the pop-up "Verification Method" box (as shown in), click "edit ":



The "Anonymous User Account" is displayed. The default value is "IUSR _ machine name". Click "Browse ":



In the "Select User" dialog box, find the newly created account "IUSR_VHOST1" and double-click:



In this case, the anonymous user name has been changed. In the Password box, enter the password set for this account when you created it:



Confirm the password again:



OK. Click OK to close these dialog boxes.

After this setting, users of the "First Virtual Host" can only access the content in their directory F: \ VHOST1 by using the FileSystemObject component of ASP. when attempting to access other content, an error message is displayed, such as "no permission", "the hard disk is not ready", and "500 internal server error.

In addition, if the user needs to read the partition capacity of the hard disk and the serial number of the hard disk, this setting will make it unreadable. If you want to allow it to read the content related to the entire partition, right-click the partition (volume) of the hard disk and choose "attribute"> "security ", add the user's account to the list and grant at least the "read" permission. The sub-directories under the volume have been set to "prohibit the propagation of inherited permissions from the parent class to this object", so the permission settings of the sub-directories below will not be affected.