IIS 7 directory permissions settings detailed questions

Some time ago, after configuring IIS 7.5+PHP(FASTCGI)+MYSQL on the windows server 2008 r2 (x64) server, the operation has been normal. Until yesterday, due to the failure of online backup mysql failed.

php shows execution success, but the execution time is an astronomical number —— This situation has been encountered in the php environment where nginx or apache was previously configured. The reason is that the php memory limit is too small, or The timeout setting is too small. However, after modifying the fastcgi execution time and increasing the php memory, the problem remains.

Then consider the issue of execution permissions, so the default four accounts (create directory, system, administrator, users) are all set to be readable and writable and unexecutable — — the result is still not.

When I was almost crazy, I suddenly remembered that the iis7.5 running account was not in the traditional user list, but a group of passwordless accounts under the IIS_Iusrs group.

Then given the read and write permissions of the relevant read-write directory iis_iusrs, ok, the file execution read is normal.

The IIS_IUSRS built-in group replaces the IIS_WPG group in iis7.5, which is also a noteworthy place.

Another thing to note is that if you don't need to manipulate objects, such as .html, .php, etc., a non-object file or directory, you don't need to set the directory permissions for —— or you can set the system. Read and write permissions to achieve

Example

Run the script for 2008 R2 system IIS7.5 for ASP/PHP/.net1.1-4.0 all-round space environment as an example, give you a brief explanation Site directory permissions settings. Example: 1. Site user group ——TSHost 2, site domain name ——tingsea.com.cn 3. Site user ——tingsea 4, www root directory is e:/WwwRoot 5, site ftp root directory For e:/wwwroot/tingsea 6, the site web directory is e:/wwwroot/tingsea/web 7, the site log directory is e:wwwroot/tingsea/log 8, and the site independent data directory is e:/wwwroot/tingsea/db Permission description (for the sake of simplicity, the inheritance and non-special permissions are not listed here, only the relative and parental permissions are added)

e:/—— administrators ,SYSTEM Full control e:/wwwroot —— IIS_IUSRS read e:/wwwroot/tingsea —— tingsea read e:/wwwroot/tingsea/web —— tingsea <not inherited> This folder, Subfolders and files