IIS_IUSRS and IUSR permissions in IIS8

by

I hate to post my own answer, but some answers recently have ignored the solution I posted in my own question, suggesting approaches that are nothing short of foolhardy.

In short – you do not need to edit any Windows user account privileges at all. Doing so only introduces risk. The process is entirely managed in IIS using inherited privileges.

Applying Modify/Write Permissions to the Correct User Account

  1. Right-click the domain when it appears under the Sites list, and choose Edit Permissions

    enter image description here

    Under the Security tab, you will see MACHINE_NAME\IIS_IUSRS is listed. This means that IIS automatically has read-only permission on the directory (e.g. to run ASP.Net in the site). You do not need to edit this entry.

    enter image description here

  2. Click the Edit button, then Add…

  3. In the text box, type IIS AppPool\MyApplicationPoolName, substituting MyApplicationPoolName with your domain name or whatever application pool is accessing your site, e.g. IIS AppPool\mydomain.com

    enter image description here

  4. Press the Check Names button. The text you typed will transform (notice the underline):

    enter image description here

  5. Press OK to add the user

  6. With the new user (your domain) selected, now you can safely provide any Modify or Write permissions

    enter image description here

More Related Contents:

  1. IIS7 Failed to grant minimum permission requests
  2. Dots in URL causes 404 with ASP.NET mvc and IIS
  3. ASP.NET Web API – PUT & DELETE Verbs Not Allowed – IIS 8
  4. Config Error: This configuration section cannot be used at this path
  5. asp.net core web api published in IIS after moved to different IIS server pc gives error 500.19 (0x8007000d)
  6. Enable IIS7 gzip
  7. How to configure static content cache per folder and extension in IIS7?
  8. How can I create a self-signed cert for localhost?
  9. Port 80 is being used by SYSTEM (PID 4), what is that?
  10. Is Chrome ignoring Cache-Control: max-age?
  11. mod_rewrite equivalent for IIS 7.0 [closed]
  12. How to redirect a URL path in IIS?
  13. “405 method not allowed” in IIS7.5 for “PUT” method
  14. Using makecert for Development SSL
  15. web.config redirect non-www to www
  16. How do I enable upload of large files in classic ASP on IIS 7?
  17. Virtual directory inside of ASP.NET Core app in IIS
  18. Downloading Docx from IE – Setting MIME Types in IIS
  19. ASP.NET Core deployment to IIS error: Development environment should not be enabled in deployed applications
  20. IIS 7.5 application pool uses wrong %APPDATA% for custom user as identity
  21. How do I configure a .net core API to work in IIS?
  22. How to guide for getting a classic asp application working under IIS 7.0
  23. How to disable HTTP/2 on IIS 10
  24. How do I create a user account for basic authentication?
  25. I have already enabled classic asp support on IIS for windows 7, and configured IIS web for classic asp,Yet .asp page is not being displayed? [closed]
  26. What does ‘IISReset’ do?
  27. Is it possible to do friendly url (url rewriting) in classic asp?
  28. Use SVG in Windows Azure Websites
  29. Make IIS require SSL client certificate during initial handshake
  30. Asp.Net core MVC application Windows Authentication in IIS

Leave a Comment