Iis

IIS and www.root

[lrich007]

Here is my question? When we created a web site using IIS it also created inetpub and www.root. I have always placed created directories and files under www.root. My administrator decided to create a secure directory outside of www.root in another directory and uses the network privilidges to make the directory secure. Is this the normal way to make a secure directory outside of www.root? He says it doesn't matter where you put a directory as long as you tell IIS where to find the files. This sounds strange to me and I would like to know if this is correct. I explained that just because we can do it should we.

[john_k]

Yes, you should place your websites somewhere OTHER than the default location. It does not make your server immune to hacking, but it makes it less vulnerable to scripted hacks and worms.

[PatomaS]

Hello

:)

In deed it is a good practice...

With this way, you can have a better control of the site, users, statistics, and all the information related to the navigation and security.

Of course, you have to be careful with the privilidges you asign to the users, because if you asing acces from the NT system and forget to do in the IIS, it won't work, tha same as the oposite, you have to set the access to the web user of NT and the public users in IIS.