IIS File Permissions

Question

Hello all,

I have an app which I'm trying to restrict permissions to while I'm doing maintenance. I use windows file permissions and remove access to the dll file the app runs from for all non admin accounts, ie:

cacls "%DLL_LOC%" /E /R BUILTIN\Users

and then I recycle the application pool (which was working on my dev environment to lockout users):

cscript c:\windows\system32\iisapp.vbs /a "DefaultAppPool" /r

But no luck as anybody can still access the dll and the app.

Any further ideas are appreciated as I haven't gotten the permissions to consistently be applied.

Answer 1

Make sure that the file you are editing is not inheriting its permissions from the folder above.

Answer 2

So after a couple of illfated attempts at trying to block network ports for a workaround and restarting the machine two or three times the users are blocked.

Sorry for the simple restart fix XP.