设置IIS中最小权限分配的批处理文件(安全配置)

作者: mikj 分类: win 发布时间: 2010-05-28 17:26 ė 6没有评论

Windows下的IIS权限分配是一件头痛的问题。此批处理文件就是设置在windows下IIS最小权限的分配方式,用批处理的方法解决。

直接把下面的代码保存成.bat文件即可!

echo off
echo “虚拟主机C盘权限设定”
echo “Author:an85.com”

echo “删除C盘的everyone的权限”
cd/
cacls “%SystemDrive%” /r “everyone” /e
cacls “%SystemRoot%” /r “everyone” /e
cacls “%SystemRoot%/Registration” /r “everyone” /e
cacls “%SystemDrive%/Documents and Settings” /r “everyone” /e

echo “删除C盘的所有的users的访问权限”
cd/
cacls “%SystemDrive%” /r “users” /e
cacls “%SystemDrive%/Program Files” /r “users” /e
cacls “%SystemDrive%/Documents and Settings” /r “users” /e

cacls “%SystemRoot%” /r “users” /e
cacls “%SystemRoot%/addins” /r “users” /e
cacls “%SystemRoot%/AppPatch” /r “users” /e
cacls “%SystemRoot%/Connection Wizard” /r “users” /e
cacls “%SystemRoot%/Debug” /r “users” /e
cacls “%SystemRoot%/Driver Cache” /r “users” /e
cacls “%SystemRoot%/Help” /r “users” /e
cacls “%SystemRoot%/IIS Temporary Compressed Files” /r “users” /e
cacls “%SystemRoot%/java” /r “users” /e
cacls “%SystemRoot%/msagent” /r “users” /e
cacls “%SystemRoot%/mui” /r “users” /e
cacls “%SystemRoot%/repair” /r “users” /e
cacls “%SystemRoot%/Resources” /r “users” /e
cacls “%SystemRoot%/security” /r “users” /e
cacls “%SystemRoot%/system” /r “users” /e
cacls “%SystemRoot%/TAPI” /r “users” /e
cacls “%SystemRoot%/Temp” /r “users” /e
cacls “%SystemRoot%/twain_32” /r “users” /e
cacls “%SystemRoot%/Web” /r “users” /e
cacls “%SystemRoot%/WinSxS” /r “users” /e

cacls “%SystemRoot%/system32/3com_dmi” /r “users” /e
cacls “%SystemRoot%/system32/administration” /r “users” /e
cacls “%SystemRoot%/system32/Cache” /r “users” /e
cacls “%SystemRoot%/system32/CatRoot2” /r “users” /e
cacls “%SystemRoot%/system32/Com” /r “users” /e
cacls “%SystemRoot%/system32/config” /r “users” /e
cacls “%SystemRoot%/system32/dhcp” /r “users” /e
cacls “%SystemRoot%/system32/drivers” /r “users” /e
cacls “%SystemRoot%/system32/export” /r “users” /e
cacls “%SystemRoot%/system32/icsxml” /r “users” /e
cacls “%SystemRoot%/system32/lls” /r “users” /e
cacls “%SystemRoot%/system32/LogFiles” /r “users” /e
cacls “%SystemRoot%/system32/MicrosoftPassport” /r “users” /e
cacls “%SystemRoot%/system32/mui” /r “users” /e
cacls “%SystemRoot%/system32/oobe” /r “users” /e
cacls “%SystemRoot%/system32/ShellExt” /r “users” /e
cacls “%SystemRoot%/system32/wbem” /r “users” /e

echo “添加iis_wpg的访问权限”
cacls “%SystemRoot%” /g iis_wpg:r /e
cacls “%SystemDrive%/Program Files/Common Files” /g iis_wpg:r /e

cacls “%SystemRoot%/Downloaded Program Files” /g iis_wpg:c /e
cacls “%SystemRoot%/Help” /g iis_wpg:c /e
cacls “%SystemRoot%/IIS Temporary Compressed Files” /g iis_wpg:c /e
cacls “%SystemRoot%/Offline Web Pages” /g iis_wpg:c /e
cacls “%SystemRoot%/System32” /g iis_wpg:c /e
cacls “%SystemRoot%/Tasks” /g iis_wpg:c /e
cacls “%SystemRoot%/Temp” /g iis_wpg:c /e
cacls “%SystemRoot%/Web” /g iis_wpg:c /e

echo “添加iis_wpg的访问权限[.net专用]”
cacls “%SystemRoot%/Assembly” /g iis_wpg:c /e
cacls “%SystemRoot%/Microsoft.NET” /g iis_wpg:c /e

echo “添加iis_wpg的访问权限[装了MACFEE的软件专用]”
cacls “%SystemDrive%/Program Files/Network Associates” /g iis_wpg:r /e

echo “添加users的访问权限”
cacls “%SystemRoot%/temp” /g users:c /e

本文出自 小沨的天空,转载时请注明出处及相应链接。

本文永久链接: https://www.xinai.de/49001.html

0

发表评论

电子邮件地址不会被公开。 必填项已用*标注

You must enable javascript to see captcha here!

此站点使用Akismet来减少垃圾评论。了解我们如何处理您的评论数据

Ɣ回顶部