Question

I run IIS 7.5 on Windows Server 2008 R2.
I’m getting a 404: file not found error when I browse the “/bin” folder. I understand that this is a security policy by Microsoft.

I tried doing what is written in here but it didn’t solve the issue. Any ideas?

EDIT:
Should be noted that I have no security issues. I run the IIS for direcotry browsing in a private network. Eventually I need to perform crawling and indexing on it. The problem is that pages under “/bin” and ‘/AppConfig” are not being crawled because of the 404 error.

I just need a solution for this issue. Again, no security issues are relevant here.

Answer 1

Bin folder is not intended as a place where a developer should put web pages.

In IIS 7.5 you can configure

1. Open Internet Information Services (IIS) Manager
2. In the Connections pane, go to the connection, site, application, or directory for
   which you want to modify your request filtering settings.
3. In the Home pane, double-click Request Filtering.
4. In the Request Filtering pane, click the Hidden Segments tab
5. Select the relative path that you want to show (BIN folder), and then click Remove in the Actions pane.

The same can be done via web.config

<configuration>
  <system.webServer>
   <security>
     <requestFiltering>
        <hiddenSegments applyToWebDAV="false">
           <remove segment="Bin" />
        </hiddenSegments>
     </requestFiltering>
   </security>
  </system.webServer>
</configuration>

Anyway, in orded to avoid problems on development server and on any deploy server, i think that the easiest solution is to move that pages to another folder.

---

Read here:

ASP.NET recognizes certain folder names that you can use   
for specific types of content.  
The following table lists the reserved folder names and the type   
of files that the folders typically contain.

Note
The content of application folders, except for the App_Themes folder,
is not served in response to Web requests,
but it can be accessed from application code.

• App_Browsers Contains browser definitions (.browser files) that
  ASP.NET uses to identify individual browsers and determine their
  capabilities.
• App_Code Contains source
  code for shared classes and business objects
• App_Data Contains application data files
  including .mdf database files, XML files, and other data store files.
• App_GlobalResources
  Contains resources (.resx and .resources files) that are compiled
  into assemblies with global scope.
• App_LocalResources Contains resources (.resx and
  .resources files) that are associated with a specific page, user
  control, or master page in an application
• App_Themes Contains a collection
  of files (.skin and .css files, as well as image files and generic
  resources) that define the appearance of ASP.NET Web pages and
  controls.
• App_WebReferences Contains reference contract files (.wsdl files),
  schemas (.xsd files), and discovery document files (.disco and
  .discomap files) that let you create a Web reference for use in an
  application.
• Bin
  Contains compiled assemblies (.dll files) for controls, components,
  or other code that you want to reference in your application.