Make your own free website on Tripod.com
Microsoft Home Microsoft Home

Appendixes


Files and Permissions on Internet Information Service

This appendix lists the detailed, minimum file permission settings that must be in place for FrontPage to perform as designed. Any reference to shtml.dll, author.dll, or admin.dll applies equally to their CGI counterparts: shtml.exe, author.exe, and admin.exe on IIS 1.x servers. FrontPage only edits ACLs, it never affects the permissions of any accounts not listed below.

File permissions assigned by the Check Server Extensions command

The FrontPage MMC Snap-in Check Server Extensions command corrects problems in NTFS permissions. The following list of files shows the minimum permissions required for FrontPage, as set by this command.

Windows NT directory

\WINNT\system32\infoadmn.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\mfc42.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\msvcirt.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\msvcrt.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\netapi32.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\netrap.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\rpcltc1.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\WINNT\system32\wsock32.dll

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

 

Microsoft FrontPage installation directory

The FrontPage installation directory is C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions by default.

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\servsupp\

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions\40\servsupp\fp30msft.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\servsupp\servers.cnf

INTERACTIVE Special Access (R)
NETWORK Special Access (R)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\bin\

INTERACTIVE List (RX)(Not Specified)
NETWORK List (RX)(Not Specified)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\bin\fp4*utl.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\servsupp\fp4*txt.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\servsupp\fp4*wel.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\bin\fp4*vss.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\bin\1033\fpext*.msg

(These files are only present for multi-language support, and are not normally present in an English installation of the FrontPage Server Extensions.)

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\isapi\

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\isapi\shtml.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\isapi\_vti_adm\

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\isapi\_vti_adm\admin.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\isapi\_vti_aut\

INTERACTIVE Read (RX)(RX)
NETWORK Read (RX)(RX)

\Program Files\Common Files\Microsoft Shared\Web Server Extensions \40\isapi\_vti_aut\author.dll

INTERACTIVE Read (RX)
NETWORK Read (RX)

 

Web content area

This listing is for a Web content area of \inetpub\wwwroot.

\inetpub

All directories enclosing the content root will grant LIST permissions to these accounts.

INTERACTIVE List (RX)(Not Specified)
NETWORK List (RX)(Not Specified)

\inetpub\wwwroot\_vti_pvt

INTERACTIVE Special Access (RWXD)(RWD)
NETWORK Special Access (RWXD)(RWD)

\inetpub\wwwroot\_vti_pvt\botinfs.cnf

INTERACTIVE Special Access (R)
NETWORK Special Access (R)

\inetpub\wwwroot\_vti_pvt\bots.cnf

INTERACTIVE Special Access (R)
NETWORK Special Access (R)

\inetpub\wwwroot\_vti_pvt\services.cnf

INTERACTIVE Special Access (R)
NETWORK Special Access (R)

 

\VSS\win32\ssapi.dll

This file's security settings are modified only if Visual SourceSafe 5.0 or later is installed.

INTERACTIVE (RX)
NETWORK (RX)

 

\VSS\win32\ssxx.dll

This file's security settings are modified only if Visual SourceSafe 5.0 or later is installed. The xx value is the country code, and ssus.dll is the default if no other country code is present.

INTERACTIVE (RX)
NETWORK (RX)

 

The following is a list of additional file permissions assigned when FrontPage is installed. This list assumes that the built in Windows NT groups "Administrators" and "SYSTEM" already have full control over the entire drive, and that the IUSR_<hostname> account is granted READ access to the Web content before FrontPage is installed.

FrontPage will assume any account with READ access to the Web content will need continued access after installation. Such accounts will become end users of the Web content. IUSR_<hostname> is only granted access in the list below if it had access to the files at installation time. You can substitute "all user accounts with read access to the Web content" in place of IUSR_<hostname>. Regardless of what level access these accounts were assigned prior to installation, they will be normalized to the access levels described below by FrontPage Server Extensions setup.

FrontPage will assign "Administrators" and "SYSTEM" full control everywhere.

The installing account is explicitly given Admin rights throughout the content area even though they are already an admin. You must be a Windows NT Administrator to successfully run FrontPage Server Extensions administration tools such as Fpsrvadm.

 

Web Content Area

\inetpub\wwwroot\

IUSR_<host_name> Special Access (RWXD) (RWD)
The Installing Account Special Access (RWXD) (RWD)

 

All Browseable Content

IUSR_<host_name> Special Access (RX)(R)
The Installing Account Special Access (RWPXD) (RWPD)

 

\inetpub\wwwroot\_vti_log\

IUSR_<host_name> Special Access (RWXD) (RWD)
The Installing Account Special Access (RWPXD) (RWPD)

\inetpub\wwwroot\_vti_pvt\

IUSR_<host_name> Special Access (RWXD) (RWD)
The Installing Account Special Access (RWPXD) (RWPD)

\inetpub\wwwroot\_vti_pvt\access.cnf

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\doctodep.btr

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\deptodoc.btr

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\linkinfo.cnf

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)
INTERACTIVE Special Access (RWD)
NETWORK Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\service.cnf

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)
INTERACTIVE Special Access (RWD)
NETWORK Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\services.org

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)
INTERACTIVE Special Access (RWD)
NETWORK Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\structure.cnf

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)
INTERACTIVE Special Access (R)
NETWORK Special Access (R)

\inetpub\wwwroot\_vti_pvt\svcacl.cnf

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)
INTERACTIVE Special Access (RWD)
NETWORK Special Access (RWD)

\inetpub\wwwroot\_vti_pvt\uniqperm.cnf

IUSR_<host_name> Special Access (RWD)
The Installing Account Special Access (RWD)
INTERACTIVE Special Access (RWD)
NETWORK Special Access (RWD)

\inetpub\wwwroot\_vti_txt\

IUSR_<host_name> Special Access (RWXD) (RWD)
The Installing Account Special Access (RWPXD) (RWPD)
INTERACTIVE Special Access (RWXD) (Not Specified)
NETWORK Special Access (RWXD) (Not Specified)

\inetpub\wwwroot\_vti_bin\

IUSR_<host_name> Read (RX)(RX)
The Installing Account Read (RX)(RX)
INTERACTIVE List (RX) (Not Specified)
NETWORK List (RX) (Not Specified)

\inetpub\wwwroot\_vti_cnf\

IUSR_<host_name> Special Access (RX) (R)
The Installing Account Special Access (RWPXD) (RWPD)

\inetpub\wwwroot\_private\

IUSR_<host_name> Special Access (RX) (R)
The Installing Account Special Access (RWPXD) (RWPD)


  BACK  TOP  
 
 
  Last Updated June 1999
1999 Microsoft Corporation. All rights reserved. Terms of Use. Disclaimer