Security tab on Windows Server 2008’s IIS7

iis-7windows-server-2008

I have Windows Server 2008 Web edition installed on a server with IIS7. I'm trying to change the security properties from a file/directory inside an asp.net webiste, but I can't make appear the security tab. I looked on google but did not find anything relevant for this particular OS. ¿Anyone?

Thanks a lot for our time.

Best Answer

As suggested by Alexander's comment, it sounds like you may be trying to change the access control lists through the IIS management interface when you actually need to change individual directory ACLs through Explorer.

You may also need to change the way Explorer shows security and sharing information (Tools menu, Folder Options..., View tab) to disable "Simple Sharing" or "Sharing Wizard".

Related Solutions

IIS7 theoretical limits

According to David Wang on the Microsoft IIS team, there are no limits to the number of websites supported by IIS (see post here) other than hardware limitations. Although that answer related to IIS6, I have to assume it is the same for IIS7.

IIS6 vs. IIS7 and IIS7.5: handling URLs with plus sign (+) in base (not querystring)

After searching for more combinations of IIS and plus, it appears that IIS7[.5] is set up to reject URLs with a plus sign by default out of some fear of the use of that character; that symbol is still allowed in the querystring, though. The solution is to alter the requestFiltering attribute default on <system><webServer><security><requestFiltering> to allow doubly-encoded characters with a command line call (ultimately modifying your ASP.NET web.config):

%windir%\system32\inetsrv\appcmd set config "Default Web Site" -section:system.webServer/security/requestFiltering -allowDoubleEscaping:true

This may be a bit more dangerous than one prefers to be with their web site, but there didn't appear to be a way to be more specific than a blanket allow. The warnings were regarding the mismatching that could occur between using a plus in a URL and its typical translation as a space. It looks like the only other alternative is to stop using plus characters in your URLs at all.

Best Answer

Related Solutions

IIS7 theoretical limits

IIS6 vs. IIS7 and IIS7.5: handling URLs with plus sign (+) in base (not querystring)

Related Topic