Protecting Folders

[itHighway]

Hello!

This is Zeeshan Ahmed from itHighway. We need a wayt to protect a couple of folders from directly being accessed. One folder will contain "images" and the other folder will contain "Text files".

Right now if someone directly type the http address of image or text file, it opens the file in browser. We need a way to protect image and text file folder. But on the other hand we also want our administrator to access these files after login in to his account.


What are the permissions we have to set on our windows 2003 server?

Any Idea...
Any Help....
Will be greatly appriciated..


Thanks
Zeeshan Ahmed

[inCharge.co.uk]

You mean that web visitors must authenticate before they can access parts of your website? How you do this depends on whether you use want to use Windows Authentication or scripted authentication.

Are these users already authenticating? If so then by what method? If not then the method depends on how many there are and how often the accounts change.

Which control panel are you using? Some have folder password protection as standard.

Cheers, Julian

[itHighway]

Let me put it this way that, I only want my web site administrator to Read and Write from the folder. No one else can browse images/text files from that folder?


Thank you

[inCharge.co.uk]

The administrator can lock out all other users by logging in with Remote Desktop and using Windows Explorer to remove the permissions of other users: right click, properties, security, advanced, uncheck 'allow inheritable...', copy parent permissions, OK. Then select the user to restrict and uncheck the permissions.

Next time you browse to a file in that folder you get a login dialog and only administrators are allowed.

Alternatively, you could just move these folders outside the wwwroot folder making them accessible only via Remote Desktop.

[itHighway]

If I move the folders outside the wwroot, can I make administrator to be able to Read/Write the images/text files using browser?


Thanks for your help, I really appriciate it.
Zeeshan Ahmed

[inCharge.co.uk]

...forgot to say...

Also, in IIS under the folder's Directory Security tab check the 'Windows Authentication' box if it isn't already.

[inCharge.co.uk]

Originally posted by itHighway
If I move the folders outside the wwroot, can I make administrator to be able to Read/Write the images/text files using browser?


Thanks for your help, I really appriciate it.
Zeeshan Ahmed

No. If you want to be able to browse then leave them under wwwroot.

No problem. I get help in here sometimes too :)

[cmurphy54]

You could set it up so that your administrator can access the files via ftp regardless of if the files are in the wwwroot or not.