Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Is it possible to disable web.config files completely for a site?

$
0
0

Hi,

Can anybody tell me please, is there an analogue to Apache's "AllowOverride None" directive in regards of the web.config files? In other words, can I make IIS ignore all web.config files in directory structure of specific site, and store all configuration in one file outside the structure (e.g. applicationHost.config)?

I have a Windows 2008 R2 server with IIS7.5. I need to provide users with read-write access to some directory tree via WebDAV. The same users will also be able to reach the same directories by other means - FTP, SFTP, CIFS, etc.

My aim: I don't want someone to be able to upload / modify web.config files in the published folders, thus modifying behavior of IIS. If such file is created, IIS should simply treat it as any other file.

Thanks!


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>