CODEWITHSUNDEEP
securityiisiis-7.5isapi
David Moorhouse
David Moorhouse

Reputation: 1665

IIS 7.5 ISAPI Application Pool Security

I'm running an ISAPI dll under IIS 7.5, and wish to use Bill Egge's ISAPI Loader dll so an updated dll can be swapped out without stopping the server.

If I set the security on the directory holding the DLL to "everyone" with "full control" then it works as designed (a dll with an *.update extension automatically causes the existing *.run dll to be backed up, and the new dll to be renamed with the *.run extension).

Obviously I do not wish to use the "everyone" account as this blows the security wide open. So I have removed the permissions for "everyone".

My app runs under an application pool - "TestAppPool". I have followed the top rated answer at IIS7 Permissions Overview - ApplicationPoolIdentity and added security for user "IIS AppPool\TestAppPool" to "full control". However this does not allow the *.update dll to overwrite the *.run dll.

Can anyone point me in the right direction.

Upvotes: 1

Views: 1312

Answers (1)

David Moorhouse
David Moorhouse

Reputation: 1665

Thanks to Rich, the answer was to give modify rights to the IUSR account on the directory hosting the isapai dll.

Upvotes: 1

Related Questions