IIS 7.5 ISAPI Application Pool Security

2019-08-04 05:56发布

问题:

I'm running an ISAPI dll under IIS 7.5, and wish to use Bill Egge's ISAPI Loader dll so an updated dll can be swapped out without stopping the server.

If I set the security on the directory holding the DLL to "everyone" with "full control" then it works as designed (a dll with an *.update extension automatically causes the existing *.run dll to be backed up, and the new dll to be renamed with the *.run extension).

Obviously I do not wish to use the "everyone" account as this blows the security wide open. So I have removed the permissions for "everyone".

My app runs under an application pool - "TestAppPool". I have followed the top rated answer at IIS7 Permissions Overview - ApplicationPoolIdentity and added security for user "IIS AppPool\TestAppPool" to "full control". However this does not allow the *.update dll to overwrite the *.run dll.

Can anyone point me in the right direction.

回答1:

Thanks to Rich, the answer was to give modify rights to the IUSR account on the directory hosting the isapai dll.