Kích vào Start | Programs | Administrative Tools. 2. Nhấp vào Internet Services Manager mở cửa sổ Internet Information Services, như đã được thể hiện trong Hình . 3. Kích chuột phải vào các trang web FTP mà bạn muốn quản lý, và nhấn | Securing Internet Information Services Chapter 11 485 Exercise Setting FTP Site Permissions 1. Click Start Programs Administrative Tools. 2. Click the Internet Services Manager opens the Internet Information Services window as was shown in Figure . 3. Right-click the FTP site that you want to manage and click Properties. This opens the FTP site Properties page as demonstrated in Figure . Figure The Home Directory Tab of the FTP Site s Properties 4. Click the Home Directory tab within the FTP site Properties page. 5. Check to allow Read Write or both. 6. Click OK to save changes and exit the FTP site s properties. Configuring NTFS Permissions When a user attempts to access your site Web permissions or FTP permissions are verified first. Next IIS verifies that the user also has the correct NTFS are the same NTFS permissions used in Windows you combine NTFS and Web permissions the most restrictive settings win. In other words if a user has Read and Write Web permissions but only the Read NTFS permission the user s effective setting is Read. If the user has the Write 486 Chapter 11 Securing Internet Information Services FTP permission but only the Read NTFS permission the user s effective setting is also basic NTFS Permissions include Full Control User can view run change delete and change ownership of the file or directory. Modify User can view run change and delete the file or directory. Read and Execute User can view the file and run the file or directory. List Folder Contents User can list the contents of a folder found only on folders not files . Read User can view the file. Write User can view run and change the file. Whenever possible you should use groups to assign to organize the files on your server into directories. Assign permissions to groups at the directory level. This is much easier than trying to manage every file on a user-by-user basis. Always .
