Home/ Questions/Q 7638211
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-31T08:07:09+00:00

I have a virtual directory (called File) setup for my web application. The directory

  • 0

I have a virtual directory (called “File”) setup for my web application. The directory is used to house user file uploads as well as official downloads that we offer.

I want to prevent any file from the “File/UserUpload” directory from ever being served up to a user. It would be pretty difficult (i.e. it will never happen) for a user to come up with the proper filename to request a file since the files are created with a GUID, but I’d like to disallow it nonetheless.

How can I stop IIS from serving files in the virtual directory?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Add a web.config file to the directory which denies all users access to the directory.

    It should look something like this:

    IIS 7:

    <system.webServer>
  <security>
      <authorization>
          <remove users="*" roles="" verbs="" />
      </authorization>
  </security>
</system.webServer>

    Here is another SO post which may be helpful:
    https://serverfault.com/questions/72680/iis7-how-to-block-access-with-a-web-config-file

    • 0