Win 2003 hard drive security settings for ASP-class Web sites

Security | Hard Drive

C: Partition section:

C:

Administrators All

IIS_WPG only This folder

List Folder/Read data

Read properties

Read Extended Properties

Read permissions

C:inetpubmailroot

Administrators All

System All

Service All

C:inetpubftproot

Everyone read-only and run

C:windows

Administrators All

Creator owner

Not inherited.

Subfolders and files only

Completely

Power Users

Modify, read and run, List folder directories, read, write

System All

Users Read and run, List folder directories, read

C:Program Files

Everyone only has this folder

Not inherited.

List Folder/Read data

Administrators All

IIS_WPG only This folder

List files/Read data

Read properties

Read Extended Properties

Read permissions

C:Program FilesCommon Files

Administrators All

Creator owner

Not inherited.

Subfolders and files only

Completely

Power Users

Modify, read and run, List folder directories, read, write

System All

TERMINAL SERVER Users (if you have this user)

Modify, read and run, List folder directories, read, write

Users Read and run, List folder directories, read

If our software is installed:

C:Program Filesliweiwensoft

Everyone reads and runs, lists folder directories, reads

Administrators All

IIS_WPG reads and runs, lists folder directories, reads

C:Program Filesdimac (If you have this directory)

Everyone reads and runs, lists folder directories, reads

Administrators All

C:Program Filescomplus Applications (if any)

Administrators All

C:Program FILESGFLSDK (if any)

Administrators All

Creator owner

Not inherited.

Subfolders and files only

Completely

Power Users

Modify, read and run, List folder directories, read, write

System All

TERMINAL SERVER Users

Modify, read and run, List folder directories, read, write

Users Read and run, List folder directories, read

Everyone reads and runs, lists folder directories, reads

C:Program Filesinstallshield Installation Information (if any)

C:Program filesinternet Explorer (if available)

C:Program filesnetmeeting (if any)

Administrators All

C:Program Fileswindowsupdate

Creator owner

Not inherited.

Subfolders and files only

Completely

Administrators All

Power Users

Modify, read and run, List folder directories, read, write

System All

D: Partition section:

D: (if user site content is placed in this section)

Administrators all permissions

D:freehost (if this directory is used to place user site content)

Administrators all permissions

SERVICE All rights

E: Partition section:

From a security perspective, we recommend that Webeasymail (Winwebmail) be installed on separate disks, such as E:

E: (if Webeasymail is installed on this disk)

Administrators all permissions

System Full Permissions

iusr_*, default Internet Guest account (if this site is run with this user)

Not inherited.

Child folders only

Read permissions

E:webeasymail (if Webeasymail is installed in this directory)

Administrators All

System Full Permissions

SERVICE All

iusr_*, default Internet Guest account full permissions (if this site is run with this user)

About iusr_*, we do not recommend using this user to run Webeasymail, should use a platform to open a virtual host to run Webeasymail.

----------------don't know if 2000 is the same setting