How to create a new permissions template by using the IIS Permissions Wizard Template Maker (320049)



The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional

This article was previously published under Q320049

SUMMARY

This step-by-step article describes how to create a new permissions template for your Web site or File Transfer Protocol (FTP) site by using the IIS Permissions Wizard Template Maker in Microsoft Internet Information Services (IIS) 5.0.

A Permissions template is a collection of security settings that include access control permissions, authentication methods, and IP address restrictions. You can use these settings to configure access to your Web site or FTP site. Permissions templates are stored in the metabase in the following location:
  • Web templates: LM\W3SVC\Info\Templates
  • FTP templates: LM\FTPSVC\Info\Templates
The IIS Permissions Wizard Template Maker is available in the Microsoft Windows 2000 Server Resource Kit. You can use this tool to edit existing Permissions templates or to create new templates that you can apply to your Web site or FTP site by using the Permissions Wizard in IIS.

Install the Permissions Wizard Template Maker

To install the IIS Permissions Wizard Template Maker:
  1. Insert the Windows 2000 Server Resource Kit CD-ROM into the computer's CD-ROM or DVD-ROM drive.
  2. Start Windows Explorer, and then open the Drive:\Apps\Iispermwizard\x86 folder, where Drive is the computer's CD-ROM or DVD-ROM drive.
  3. Double-click Setup.exe.
  4. Follow the instructions to install the Permissions Wizard Template Maker.

Create a New Permissions Template

To create a new permissions template:
  1. Click Start, point to Programs, point to Administrative Tools, and then click IIS Permissions Wizard Template Maker.
  2. Click Next.
  3. Click Design New Template, and then use one of the following methods:
    • To create a new Permissions template for an FTP site, click FTP Site, and then click Next.
    • To create a new Permissions template for a Web site, click Web Site, and then click Next.
  4. Under Authentication Methods, click to select the check boxes for the authentication methods that you want to define for the template, and then click Next.
  5. Under Access Permissions, click to select the check boxes for the access permissions that you want to define for the template, and then click Next.
  6. Under IP Address Access Restrictions, specify whether you want to grant or deny access to specific users, and then click Next.
  7. Under Template Information, type a name and description for your new template in the appropriate boxes, and then click Next.
  8. Click Finish.

Apply the Permissions Template to a Web Site or FTP Site

To apply a Permissions template to a Web site or FTP site:
  1. Start Internet Services Manager, or start the IIS snap-in in Microsoft Management Console (MMC).
  2. Expand * Server name, where Server name is the name of the server.
  3. Right-click the Web site or FTP site to which you want to apply the Permissions template, point to All Tasks, and then click Permissions Wizard.
  4. Click Next.
  5. Click Select new security settings from a template, and then click Next.
  6. In the Scenario box, click the template that you want to apply, and then click Next.
  7. Click the option with which to configure Windows 2000 file and folder permissions, and then click Next.
  8. Review the security settings that are selected for your site. When you are ready to apply these settings, click Next.
  9. Click Finish.

REFERENCES

For more information about the Permissions Wizard, see the IIS 5.0 documentation. If IIS is installed on the computer, start Microsoft Internet Explorer, type the following address in the Address box, and then press ENTER: Or, you can view the IIS 5.0 documentation on the following Microsoft Web site: For more information about how to control access to Web content, click the following article numbers to view the articles in the Microsoft Knowledge Base:

313075 How to configure Web server permissions for Web content in IIS

300985 How to configure User and Group access on a Windows NT 4.0-based or Windows 2000-based Intranet

187506 List of NTFS permissions required for IIS site to work

271071 Minimum NTFS permissions required for IIS 5.0 to work

For more information about IIS security, click the following article numbers to view the articles in the Microsoft Knowledge Base:

282060 Resources for securing Internet Information Services

For more information about the Windows 2000 Resource Kit, visit the following Microsoft Web site:

Modification Type:MajorLast Reviewed:9/27/2006
Keywords:kbhowto kbHOWTOmaster KB320049 kbAudITPro