: How do I grant security to my site users to be able to upload files in Windows Server 2012 Using Windows Server 2012 and IIS 8, I want my site users to be able to upload pictures and generate

@Nimeshi995

Posted in: #Security #Windows

Using Windows Server 2012 and IIS 8, I want my site users to be able to upload pictures and generate eft files and export files etc. All of these tasks require my users to have write permission to the various folders where these files are saved. I'm not sure how I should be granting permissions on particular folders so that the site users can do these things.

My understanding was, that I needed to grant write access to my defaultAppPool user on the folder where these files are saved (because it is defaultAppPool that my site is using), but this does not work. I also tried giving IIS_IUSRS write permission to the same folder but this also doesn't work.

The only way I got it to work was by granting write permission to the "Users" group, which includes "NTAUTHORITYAuthenticatedUsers (S-1-5-11)" and "NT AUTHORITYINTERACTIVE (S-1-5-4)" (and who are these guys?).

So I guess what I'm wondering is, which user are my site users actually using and what is the correct way to grant write permission to specific folders?

Vote Up Vote Down

Login to post a comment!