IIS Directory Script

Admiral Michael

OSNN Veteran Addict
Joined
19 Feb 2003
Messages
3,123
IIS Directory Script1

Hey,

Does anyone know how, if possible, one can edit the look of the default directory listing script in IIS 6.0?
 
Last edited:
I don't understand what you want to do. Explain more please?
 
I don't know how easy it is to change the look/feel of the built in IIS directory display. You could roll your own page with ASP to do a file listing - which might be better since then you wouldn't have to turn on directory browsing and just make the asp page your default page - it would also give you even more control to hide certain files if you wanted to.
 
madmatt said:
I don't understand what you want to do. Explain more please?

THe directory listing capabilities in IIS, I want to change how it looks.
fitz said:
I don't know how easy it is to change the look/feel of the built in IIS directory display. You could roll your own page with ASP to do a file listing - which might be better since then you wouldn't have to turn on directory browsing and just make the asp page your default page - it would also give you even more control to hide certain files if you wanted to.

I've done that for most of my site BUT I have a login downloads area that I don't want to have to place a index.asp file in each folder since there's like 50 or so folders.
 
Admiral Michael said:
THe directory listing capabilities in IIS, I want to change how it looks.


I've done that for most of my site BUT I have a login downloads area that I don't want to have to place a index.asp file in each folder since there's like 50 or so folders.

FTP? *shudder*

In all seriousness, I dont' think there is a way to change it without totally hacking IIS.

In theory, you could build an application that takes and passes the directory path as a variable and plugs it into an ASP page.. never tried it personally.
 
ok looks like it can't really be done. Now for another question.

I have a netowrk share called downloads which gives anyone on my LAN read only access (cept for me, I get write address). Now I just reliased that when I try to login to my downloads area on my site, I can enter anything and still get in.

If I disable the guest account it fixes it BUT the LAN users loose access. I don't want to setup a user for each computer because if I have a, let's say, client's computer then I don't want to have to enter a login to access this share. I just want to stop the guest account from interecting with IIS or just allow only one the user "downloads" access tho this site area.

Hope that explains it all.
 
Post a screenshot of the permissions set for this share please :)
 
Here's the permission page for the network share. Everyone only has Read checked.
 

Attachments

  • permissions.JPG
    permissions.JPG
    24.8 KB · Views: 220
What is the authentication set to in IIS?

EDIT: It may be working for you no matter what you type if it's taking your windows credentials (I forget the fancy word for that).

EDIT2: I believe it is "Integrated Windows Authentication"
 
kcnychief said:
What is the authentication set to in IIS?

EDIT: It may be working for you no matter what you type if it's taking your windows credentials (I forget the fancy word for that).

EDIT2: I believe it is "Integrated Windows Authentication"

Well that is what's it's set to. The only restrictions on the downloads is whether it's anonymous or not. The only area I can set individual permissions is through NTFS permissions, and if I restrict guest, well you know.
 
Post your website here and I'll try to access it. The issue might not occur outside of your network.

EDIT: My logic behind that is that my stored windows credentials don't mean a grain of salt when hitting your IIS server, but anything you do internally obviously does :lick:
 
Yeah test/test let me in. Muhahahahah :mad:

What I would do in the mean time, is take that share down. Disable all access to it besides yourself. Make a test share in it's place, this way while you are fiddling with settings the content is safe ;)
 
kcnychief said:
Yeah test/test let me in. Muhahahahah :mad:

What I would do in the mean time, is take that share down. Disable all access to it besides yourself. Make a test share in it's place, this way while you are fiddling with settings the content is safe ;)

It's a virtual directory so I'll take it down for now.
 
well, couple things I would be checking..

Is anonymous access turned on in IIS? Even if "integrated" is checked, IIS will always try to authenticate as anonymous first..
Is this machine belong to an Active Directory domain?
Are there domain and/or local policies that restrict the access of the BUILT-IN\Everyone group?
Are there domain and/or local that restrict anonymous browsing and enumeration?
Is there any NTFS permissions set?
What happens when you specifically grant the IUSR_<computername> account access?

We can start from there and dig deeper as we go
 
Is anonymous access turned on in IIS? Even if "integrated" is checked, IIS will always try to authenticate as anonymous first..
Anonymous access is disabled, it prompts for username password but since I have Everyone set to read, anything entered will allow access.

Is this machine belong to an Active Directory domain?
No.

Are there domain and/or local policies that restrict the access of the BUILT-IN\Everyone group?
Not that I know of.

Are there domain and/or local that restrict anonymous browsing and enumeration?
Not sure what you mean excatly.

Is there any NTFS permissions set?
Yep, will post when I get a chance.

What happens when you specifically grant the IUSR_<computername> account access?
Well, Im not sure what that will do as the user account I want to use is Downloads.
 
Last edited:
I was poking round the Security Policies and there is a rule for allowing specific anonymous shares but it didn't work, I think the Guest account is still needed.

From this standpoint it looks like this can't be done, at least not without killing anonymous LAN access as well.

One thing I don't like bout IIS is it's integration with Windows for users. I used to use KF Webserver and it did everything I wanted except ASP which is why I switched. KF had it's own separate database for users.


KC: Thanks for the link but I didn't find too much thats related to this issue.
 

Members online

No members online now.

Latest profile posts

Also Hi EP and people. I found this place again while looking through a oooollllllldddd backup. I have filled over 10TB and was looking at my collection of antiques. Any bids on the 500Mhz Win 95 fix?
Any of the SP crew still out there?
Xie wrote on Electronic Punk's profile.
Impressed you have kept this alive this long EP! So many sites have come and gone. :(

Just did some crude math and I apparently joined almost 18yrs ago, how is that possible???
hello peeps... is been some time since i last came here.
Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.

Forum statistics

Threads
62,015
Messages
673,494
Members
5,621
Latest member
naeemsafi
Back