Question

How can I deny access to particular directory in IIS.
In Apache I could just add .htaccess file:

Order allow,deny
Deny from all

to Logs or cache directory and nobody will allowed to see any content in that directory.

However when I add Web.config:

<?xml version="1.0"?>
<configuration>

    <system.web>
      <authorization>        
        <deny users="*"/>
      </authorization>
    </system.web>

</configuration>

it works only for files handled by asp and doesn’t work for i.e. log.txt.

I don’t have access to IIS server, I can only add and change files.

Thanks in advance for help.

Answer 1

In IIS6 when you open folder properties you will see a checkbox labeled “Read”. Try unsettling it