File and folder security in Windows 2003

[Matojo2006]

I am setting up a server for Windows/ASP.NET hosting. The users will be allowed to create their own websites and the website will impersonate the Windows user account.

I am trying to setup the security on files and folders wuch that the members will have access rights only on their own files. The way I tried to do this is, first I set "Deny All permissions" for the user group on the root folder with recursive option. Then I will give Full rights to the specific user account on his specific folder. In theory, this will not work because the "Deny" rules have precendence over "Allow" rule. However, for some reason, this worked for me in the past. The user was able to access his folders since he has Allow permissions and he could not access any other folders since he is part of the group which has Deny permission.

How can I solve this problem? How can I set up a user group such a way that the members cannot access files, but still I can specify permissions explicitely for specific users to specific folders ?

- Tony

[Tanmaya]

Hi,

As You have said, You are going to Start Windows 2003/Asp.net hosting. Do you have any Control Panel to create websites for users or are you going to use Plain IIS 6.0 Server for creating Website.

If You are using any specific control Panel to create website, then it will be easy to use, as their documentation will guide you further.

And if you are going to use only Windows2003/Asp.net for creating website, then I will suggest you primary steps to get it created.

To create a new Web site

1. In IIS Manager, expand the local computer, and right-click the Web Sites folder.

2.Select New, and then click Web Site. The Web Site Creation Wizard appears.

3.Click Next.

4.In the Description box, type a name for your site, and then click Next.

5.Type or select the IP address (the default is All Unassigned), TCP port, and host header (for example, www.website.com) for your website.

6.Click Next.

7.In the Path box, type the name of the directory or click Browse to navigate to the directory that contains, or will contain, the site content[by default the location is C:\inetpub\vhost].

8.Click Next.

9.Select the check boxes for the Web site access permissions you want to assign to your users[user should be available for accessing this website], and then click Next.

10.Click Finish.

11.To change these and other settings later, right-click the Web site, and select Properties.

To upload the website content, you will need to provide FTP account to your User also.

Hope this will help you to proceed further..