Minimium NTFS ACL's for ASP.Net to run on IIS5

[PM]

Does anyone know of a white paper that gives exactly what
are the minimial NTFS ACL permissions to get ASP.Net v1.1
to work on Windows 2000 and IIS5.0, i have followed the
instructions in the MS knowledge base article - 271071

http://support.microsoft.com/default.aspx?scid=kb;EN-
US;Q271071

This has tightned up the box but still prevents ASP.Net
from working, i have also granted the ASPNet user on the
box
1) Read & Execute, Read and List Folder Contents on the
web site(s) root location.
2) Read & Execute, Read and List Folder Contents on the
web site(s) root location partition so that it can watch
for web .config changes etc.
3) Full control over the ASP.Net application locations at
C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary
ASP.NET Files

I haven't been able to find any white paper that gives me
a list of the additional permissions required and would
prefer to know these instead of just relying on what
IISLockdown will set.


Thanks in advance
Pat

 

[Natty Gur]

Hi,

Improving Web Application Security: Threats and Countermeasures (p&p)
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse
c/html/ThreatCounter.asp

read the following sections:

1)Machine.Config and Web.Config Guidelines
2)Trust Levels in ASP.NET (table 19.3)

Natty Gur[MVP]

blog : http://weblogs.asp.net/ngur
Mobile: +972-(0)58-888377