IIS7 directory permissions to set up the problem

After configuring IIS 7.5+php (FASTCGI) +mysql on a Windows Server 2008 R2 (x64) server for the previous period, it has been normal to run. Until yesterday, because of online backup MySQL failed to burn.

PHP shows successful execution, but the display of execution time is astronomical-a situation that has been met in a PHP environment that was previously configured Nginx or Apache, simply because the PHP memory limit is too small, or because the timeout time is set too small. However, modify the fastcgi execution time, increase the PHP memory, the problem remains.

Then, taking into account the issue of execution permissions, the default 4 accounts (the creation directory, system, Administrator, users) security are all set to readable and writable--the result is not.

Almost mad, it suddenly occurred to me that iis7.5 's running account was not in the traditional user list, but in a group of IIS_IUSRS accounts.

So given the relevant read and write directory Iis_iusrs read and write permissions, OK, file execution read normal.

In iis7.5, the IIS_IUSRS group replaces the IIS_WPG group, which is a relatively noteworthy place.

It is also necessary to note that if you are not an object that needs to be manipulated, such as. html,. php, and so on, you do not need to set directory permissions-or you can set the system's read and write permissions to implement

Cases

Take 2008 R2 System IIS7.5 Run script for asp/php/.net1.1-4.0 Universal space environment as an example, give you a brief explanation of Site Directory permission settings.
Example: 1, site user group--tshost
2, site domain name--tingsea.com.cn
3, site users--tingsea
4, www root directory for e:/wwwroot
5, site FTP root directory for E:/wwwroot/tingsea
6, Site Web directory for E:/wwwroot/tingsea/web
7, the site log directory for E:wwwroot/tingsea/log
8, the site independent data directory for e:/wwwroot/tingsea/db
Description of directory permissions (for illustration simplicity, here the inheritance and non privileged permissions are not detailed, only the increase in relative to the parent permission and special)

E:/--administrators, SYSTEM Full Control
E:/wwwroot--iis_iusrs Read

This article is from www.111cn.net

E:/wwwroot/tingsea--tingsea Read
E:/wwwroot/tingsea/web--tingsea < not inherited > This folder, subfolders, and files