How to Disable Access Control on an IIS FrontPage Web (194392)


The information in this article applies to:

  • Microsoft FrontPage 97 for Windows
  • Microsoft FrontPage 98 for Windows
This article was previously published under Q194392

SUMMARY

This article describes how to disable access control on a FrontPage Web running on a Microsoft Internet Information Server (IIS) computer. This potentially allows anyone to modify the contents of your Web, either through FrontPage or through scripts uploaded via FrontPage.

MORE INFORMATION

To disable access control, perform the following steps:

  1. Make sure the FrontPage Server extensions are uninstalled. To do this, use the following procedure:

    1. In the FrontPage Server Administrator, click to highlight Port 80 or the IP address.
    2. Click Uninstall.
  2. Open the Frontpg.ini file in a text editor, such as Notepad, and insert the following line under the [FrontPage 3.0] section: 
          AccessControl=0
  3. Save the Frontpg.ini file. The default location for this file is C:\Winnt\Frontpg.ini (for Windows NT) or C:\Windows\Frontpg.ini (for Windows 95 and Windows 98).
  4. Reinstall the FrontPage Server Extensions to IIS.
For additional information on installing the FrontPage Server Extensions to IIS, please see the following article in the Microsoft Knowledge Base:

169529 FP98: How to Install FrontPage Server Extensions for IIS 3.0

  1. To verify that the access control has taken effect, open FrontPage Explorer and click the Tools menu.
  2. If the Permissions option is unavailable (grayed), then changing the access control was successful.
Changing the access control disables all interaction between FrontPage and the NTFS file permissions in the Web area.

For more information on configuring IIS, please consult the IIS Readme.txt file included with the FrontPage Server Extensions.
Modification Type:MajorLast Reviewed:10/22/2003
Keywords:kbhowto KB194392
©2003 Microsoft Corporation. All rights reserved.