| Create a username & password in Admin Tools (User group only)
unset User must change password
set User cannot change password
set the password to never expire
Navigate to the folder that is used as webroot (usually InetPub\wwwrooot\) set the permissions on this folder to:
uncheck Allow inheritable permission from parent ...
remove Everyone from the user list.
Add Administrators with full control checked.
Add the new user with permissions of
Read & Execute
List Folder Contents
Read
Write
Apply & Ok
Open the IIS MMC and add this username to the Anonymous Access
uncheck the Allow IIS to control password
If your machine is connected to the internet permanently you may want to go into the advanced security on C:\ and deny the IIS username access to
Traverse
create files
Create Folders
Delete Subfolders
Delete
Change Permissions
Take Ownership
To limit the chance of script kiddies or crackers gaining access |