IIS7 testing Authentication and IUSR account

iis-7iis-7.5

I am running a development machine on Windows 7 with IIS7. These are the steps I have taken:

  • Under the Default website I created a virtual directory called test and mapped it to my D:\testvdir folder (default site is installed on C:\inetpub\wwwroot).
  • I added a html and a simple aspx file to the virtual directory.
  • I did not change the security settings for D:\testvdir or the files inside the folder, when I look the following users/groups are present for the folder as well as teh files: Authenticated Users, SYSTEM, Administrators, Users.

The book I am reading on IIS7 says "When creating a virtual directory to another location on your server or remotely, ensure that the accounts of the site anonymous user (IUSR) and the worker process identity (can be found by looking at the properties of the application pool) have the required permissions to read and execute as required."

This is where I get confused because I can access the content in my virtual directory using localhost/test/default.htm without doing what the book tells me to do.

What am I missing?

Best Answer

This could be for either of a couple reasons. Check your site's anonymous settings and see if it's set to use the app pool identity. If so, then the IUSR account isn't used. Instead it uses the app pool identity, allowing you to only have to maintain a single account.

The other possibility is that your folder already had access. For example, if "Users" already had read access then your site will likely work.