IIS Directory Script

**Admiral Michael** · March 1st, 2006

Hey,

Does anyone know how, if possible, one can edit the look of the default directory listing script in IIS 6.0?

**madmatt** · March 1st, 2006

I don't understand what you want to do. Explain more please?

**fitz** · March 1st, 2006

I don't know how easy it is to change the look/feel of the built in IIS directory display. You could roll your own page with ASP to do a file listing - which might be better since then you wouldn't have to turn on directory browsing and just make the asp page your default page - it would also give you even more control to hide certain files if you wanted to.

**Admiral Michael** · March 1st, 2006

Originally Posted by madmatt

I don't understand what you want to do. Explain more please?

THe directory listing capabilities in IIS, I want to change how it looks.

Originally Posted by fitz

I don't know how easy it is to change the look/feel of the built in IIS directory display. You could roll your own page with ASP to do a file listing - which might be better since then you wouldn't have to turn on directory browsing and just make the asp page your default page - it would also give you even more control to hide certain files if you wanted to.

I've done that for most of my site BUT I have a login downloads area that I don't want to have to place a index.asp file in each folder since there's like 50 or so folders.

**fitz** · March 1st, 2006

Originally Posted by Admiral Michael

THe directory listing capabilities in IIS, I want to change how it looks.

I've done that for most of my site BUT I have a login downloads area that I don't want to have to place a index.asp file in each folder since there's like 50 or so folders.

FTP? *shudder*

In all seriousness, I dont' think there is a way to change it without totally hacking IIS.

In theory, you could build an application that takes and passes the directory path as a variable and plugs it into an ASP page.. never tried it personally.

**Admiral Michael** · March 1st, 2006

ok looks like it can't really be done. Now for another question.

I have a netowrk share called downloads which gives anyone on my LAN read only access (cept for me, I get write address). Now I just reliased that when I try to login to my downloads area on my site, I can enter anything and still get in.

If I disable the guest account it fixes it BUT the LAN users loose access. I don't want to setup a user for each computer because if I have a, let's say, client's computer then I don't want to have to enter a login to access this share. I just want to stop the guest account from interecting with IIS or just allow only one the user "downloads" access tho this site area.

Hope that explains it all.

**kcnychief** · March 1st, 2006

Post a screenshot of the permissions set for this share please

**Admiral Michael** · March 2nd, 2006

Here's the permission page for the network share. Everyone only has Read checked.

**kcnychief** · March 2nd, 2006

What is the setting for everyone?

**Admiral Michael** · March 2nd, 2006

I edited the post, probably after you viewed the thread. It has Read checked.

**kcnychief** · March 2nd, 2006

What is the authentication set to in IIS?

EDIT: It may be working for you no matter what you type if it's taking your windows credentials (I forget the fancy word for that).

EDIT2: I believe it is "Integrated Windows Authentication"

**Admiral Michael** · March 2nd, 2006

Originally Posted by kcnychief

What is the authentication set to in IIS?

EDIT: It may be working for you no matter what you type if it's taking your windows credentials (I forget the fancy word for that).

EDIT2: I believe it is "Integrated Windows Authentication"

Well that is what's it's set to. The only restrictions on the downloads is whether it's anonymous or not. The only area I can set individual permissions is through NTFS permissions, and if I restrict guest, well you know.

**kcnychief** · March 2nd, 2006

Post your website here and I'll try to access it. The issue might not occur outside of your network.

EDIT: My logic behind that is that my stored windows credentials don't mean a grain of salt when hitting your IIS server, but anything you do internally obviously does

**Admiral Michael** · March 2nd, 2006

K, sent you a PM as I don't want other people to access it.

**kcnychief** · March 2nd, 2006

Yeah test/test let me in. Muhahahahah

What I would do in the mean time, is take that share down. Disable all access to it besides yourself. Make a test share in it's place, this way while you are fiddling with settings the content is safe

**Admiral Michael** · March 2nd, 2006

Originally Posted by kcnychief

Yeah test/test let me in. Muhahahahah

What I would do in the mean time, is take that share down. Disable all access to it besides yourself. Make a test share in it's place, this way while you are fiddling with settings the content is safe

It's a virtual directory so I'll take it down for now.

**kcnychief** · March 2nd, 2006

Here is a good resource, some of which may help you troubleshoot the issue:

http://windows.stanford.edu/docs/IISsecchecklist.htm

**fitz** · March 2nd, 2006

well, couple things I would be checking..

Is anonymous access turned on in IIS? Even if "integrated" is checked, IIS will always try to authenticate as anonymous first..
Is this machine belong to an Active Directory domain?
Are there domain and/or local policies that restrict the access of the BUILT-IN\Everyone group?
Are there domain and/or local that restrict anonymous browsing and enumeration?
Is there any NTFS permissions set?
What happens when you specifically grant the IUSR_<computername> account access?

We can start from there and dig deeper as we go

**Admiral Michael** · March 2nd, 2006

Is anonymous access turned on in IIS? Even if "integrated" is checked, IIS will always try to authenticate as anonymous first..
Anonymous access is disabled, it prompts for username password but since I have Everyone set to read, anything entered will allow access.

Is this machine belong to an Active Directory domain?
No.

Are there domain and/or local policies that restrict the access of the BUILT-IN\Everyone group?
Not that I know of.

Are there domain and/or local that restrict anonymous browsing and enumeration?
Not sure what you mean excatly.

Is there any NTFS permissions set?
Yep, will post when I get a chance.

What happens when you specifically grant the IUSR_<computername> account access?
Well, Im not sure what that will do as the user account I want to use is Downloads.

**Admiral Michael** · March 2nd, 2006

I was poking round the Security Policies and there is a rule for allowing specific anonymous shares but it didn't work, I think the Guest account is still needed.

From this standpoint it looks like this can't be done, at least not without killing anonymous LAN access as well.

One thing I don't like bout IIS is it's integration with Windows for users. I used to use KF Webserver and it did everything I wanted except ASP which is why I switched. KF had it's own separate database for users.

KC: Thanks for the link but I didn't find too much thats related to this issue.

March 1st, 2006	Top \| #1
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	IIS Directory Script1 Hey, Does anyone know how, if possible, one can edit the look of the default directory listing script in IIS 6.0? Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 1st, 2006	Top \| #2
madmatt Bow Down to the King Joined: April 2002 Location: New York Posts: 13,312 Reputation: 4090 Power: 297	Re: IIS Directory Script I don't understand what you want to do. Explain more please?

March 1st, 2006	Top \| #3
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,028 Reputation: 2947 Power: 168**	Re: IIS Directory Script I don't know how easy it is to change the look/feel of the built in IIS directory display. You could roll your own page with ASP to do a file listing - which might be better since then you wouldn't have to turn on directory browsing and just make the asp page your default page - it would also give you even more control to hide certain files if you wanted to. Hee-hee! Evil makes my buttocks tingle.

March 1st, 2006	Top \| #4
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script Originally Posted by madmatt I don't understand what you want to do. Explain more please? THe directory listing capabilities in IIS, I want to change how it looks. Originally Posted by fitz I don't know how easy it is to change the look/feel of the built in IIS directory display. You could roll your own page with ASP to do a file listing - which might be better since then you wouldn't have to turn on directory browsing and just make the asp page your default page - it would also give you even more control to hide certain files if you wanted to. I've done that for most of my site BUT I have a login downloads area that I don't want to have to place a index.asp file in each folder since there's like 50 or so folders. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 1st, 2006	Top \| #5
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,028 Reputation: 2947 Power: 168**	Re: IIS Directory Script Originally Posted by Admiral Michael THe directory listing capabilities in IIS, I want to change how it looks. I've done that for most of my site BUT I have a login downloads area that I don't want to have to place a index.asp file in each folder since there's like 50 or so folders. FTP? shudder In all seriousness, I dont' think there is a way to change it without totally hacking IIS. In theory, you could build an application that takes and passes the directory path as a variable and plugs it into an ASP page.. never tried it personally. Hee-hee! Evil makes my buttocks tingle.

Latest News Posts

Latest Forum Posts

Latest Member Blogs

March 1st, 2006	Top \| #6
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script ok looks like it can't really be done. Now for another question. I have a netowrk share called downloads which gives anyone on my LAN read only access (cept for me, I get write address). Now I just reliased that when I try to login to my downloads area on my site, I can enter anything and still get in. If I disable the guest account it fixes it BUT the LAN users loose access. I don't want to setup a user for each computer because if I have a, let's say, client's computer then I don't want to have to enter a login to access this share. I just want to stop the guest account from interecting with IIS or just allow only one the user "downloads" access tho this site area. Hope that explains it all. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 1st, 2006	Top \| #7
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: IIS Directory Script Post a screenshot of the permissions set for this share please XBOX Live Gamertag: kcnychief

March 2nd, 2006	Top \| #8
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script Here's the permission page for the network share. Everyone only has Read checked. Attached Thumbnails Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 2nd, 2006	Top \| #9
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: IIS Directory Script What is the setting for everyone? XBOX Live Gamertag: kcnychief

March 2nd, 2006	Top \| #10
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script I edited the post, probably after you viewed the thread. It has Read checked. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 2nd, 2006	Top \| #11
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: IIS Directory Script What is the authentication set to in IIS? EDIT: It may be working for you no matter what you type if it's taking your windows credentials (I forget the fancy word for that). EDIT2: I believe it is "Integrated Windows Authentication" XBOX Live Gamertag: kcnychief

March 2nd, 2006	Top \| #12
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script Originally Posted by kcnychief What is the authentication set to in IIS? EDIT: It may be working for you no matter what you type if it's taking your windows credentials (I forget the fancy word for that). EDIT2: I believe it is "Integrated Windows Authentication" Well that is what's it's set to. The only restrictions on the downloads is whether it's anonymous or not. The only area I can set individual permissions is through NTFS permissions, and if I restrict guest, well you know. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 2nd, 2006	Top \| #13
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: IIS Directory Script Post your website here and I'll try to access it. The issue might not occur outside of your network. EDIT: My logic behind that is that my stored windows credentials don't mean a grain of salt when hitting your IIS server, but anything you do internally obviously does XBOX Live Gamertag: kcnychief

March 2nd, 2006	Top \| #14
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script K, sent you a PM as I don't want other people to access it. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 2nd, 2006	Top \| #15
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: IIS Directory Script Yeah test/test let me in. Muhahahahah What I would do in the mean time, is take that share down. Disable all access to it besides yourself. Make a test share in it's place, this way while you are fiddling with settings the content is safe XBOX Live Gamertag: kcnychief

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Active Directory - 3rd Ed.	kcnychief	Windows Server Systems	4	April 11th, 2006 7:42pm
Parent Directory	NLM	Windows Desktop Systems	8	December 30th, 2003 9:57am
M$ LDAP Directory...???	GraLk	Windows Desktop Systems	5	September 12th, 2002 11:24am
temp directory in XP	samsara108	Windows Desktop Systems	5	August 8th, 2002 6:32pm
ladp directory	Bytes Back	Windows Desktop Systems	5	February 8th, 2002 4:11pm

March 2nd, 2006	Top \| #16
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script Originally Posted by kcnychief Yeah test/test let me in. Muhahahahah What I would do in the mean time, is take that share down. Disable all access to it besides yourself. Make a test share in it's place, this way while you are fiddling with settings the content is safe It's a virtual directory so I'll take it down for now. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 2nd, 2006	Top \| #17
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: IIS Directory Script Here is a good resource, some of which may help you troubleshoot the issue: http://windows.stanford.edu/docs/IISsecchecklist.htm XBOX Live Gamertag: kcnychief

March 2nd, 2006	Top \| #18
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,028 Reputation: 2947 Power: 168**	Re: IIS Directory Script well, couple things I would be checking.. Is anonymous access turned on in IIS? Even if "integrated" is checked, IIS will always try to authenticate as anonymous first.. Is this machine belong to an Active Directory domain? Are there domain and/or local policies that restrict the access of the BUILT-IN\Everyone group? Are there domain and/or local that restrict anonymous browsing and enumeration? Is there any NTFS permissions set? What happens when you specifically grant the IUSR_<computername> account access? We can start from there and dig deeper as we go Hee-hee! Evil makes my buttocks tingle.

March 2nd, 2006	Top \| #19
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script Is anonymous access turned on in IIS? Even if "integrated" is checked, IIS will always try to authenticate as anonymous first.. Anonymous access is disabled, it prompts for username password but since I have Everyone set to read, anything entered will allow access. Is this machine belong to an Active Directory domain? No. Are there domain and/or local policies that restrict the access of the BUILT-IN\Everyone group? Not that I know of. Are there domain and/or local that restrict anonymous browsing and enumeration? Not sure what you mean excatly. Is there any NTFS permissions set? Yep, will post when I get a chance. What happens when you specifically grant the IUSR_<computername> account access? Well, Im not sure what that will do as the user account I want to use is Downloads. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy

March 2nd, 2006	Top \| #20
Admiral Michael Michaelsoft Systems CEO Joined: February 2003 Location: Hamilton, Ontario Canada Earth Posts: 3,125 Blog Entries: 8 Reputation: 2216 Power: 166	Re: IIS Directory Script I was poking round the Security Policies and there is a rule for allowing specific anonymous shares but it didn't work, I think the Guest account is still needed. From this standpoint it looks like this can't be done, at least not without killing anonymous LAN access as well. One thing I don't like bout IIS is it's integration with Windows for users. I used to use KF Webserver and it did everything I wanted except ASP which is why I switched. KF had it's own separate database for users. KC: Thanks for the link but I didn't find too much thats related to this issue. Apple MacBook Pro Intel Quad-Core i7 2GHz \| Corsair 8GB 1333MHz DDR3 Memory \| WD 750GB 7200RPM Black Edition SATA Hard Drive \| Intel HD Graphics 3000/AMD Radeon HD 6490M 256MB GDDR5 \| 15.4" LED backlit glossy screen @ 1440x900 \| Dual Band Airport Wireless/Bluetooth \| Gigabit Ethernet \| Thunderbolt I/O \| Built-in Webcam \| Backlit Keyboard \| Firewire 800 \| DVDRW \| OS X Lion 10.7.1 My Site \| My DVD Collection \| Your Chevrolet Guy