用批处理实现IIS下最小权限的分配

时间:2021-05-19

随着Server2008越走越近,很多用户又一次关注IIS的安全问题,笔者整理介绍在IIS下最小权限分配的批处理文件……
复制代码 代码如下:
@echooff
echo"权限设定"
echo"删除C盘的everyone的权限"
cd/
cacls"%SystemDrive%"/r"everyone"/e
cacls"%SystemRoot%"/r"everyone"/e
cacls"%SystemRoot%/Registration"/r"everyone"/e
cacls"%SystemDrive%/DocumentsandSettings"/r"everyone"/e
echo"删除C盘的所有的users的访问权限"
cd/
cacls"%SystemDrive%"/r"users"/e
cacls"%SystemDrive%/ProgramFiles"/r"users"/e
cacls"%SystemDrive%/DocumentsandSettings"/r"users"/e
cacls"%SystemRoot%"/r"users"/e
cacls"%SystemRoot%/addins"/r"users"/e
cacls"%SystemRoot%/AppPatch"/r"users"/e
cacls"%SystemRoot%/ConnectionWizard"/r"users"/e
cacls"%SystemRoot%/Debug"/r"users"/e
cacls"%SystemRoot%/DriverCache"/r"users"/e
cacls"%SystemRoot%/Help"/r"users"/e
cacls"%SystemRoot%/IISTemporaryCompressedFiles"/r"users"/e
cacls"%SystemRoot%/java"/r"users"/e
cacls"%SystemRoot%/msagent"/r"users"/e
cacls"%SystemRoot%/mui"/r"users"/e

cacls"%SystemRoot%/repair"/r"users"/e
 cacls"%SystemRoot%/Resources"/r"users"/e
 cacls"%SystemRoot%/security"/r"users"/e
 cacls"%SystemRoot%/system"/r"users"/e
 cacls"%SystemRoot%/TAPI"/r"users"/e
 cacls"%SystemRoot%/Temp"/r"users"/e
 cacls"%SystemRoot%/twain_32"/r"users"/e
 cacls"%SystemRoot%/Web"/r"users"/e
 cacls"%SystemRoot%/WinSxS"/r"users"/e
 cacls"%SystemRoot%/system32/3com_dmi"/r"users"/e
 cacls"%SystemRoot%/system32/administration"/r"users"/e
 cacls"%SystemRoot%/system32/Cache"/r"users"/e
 cacls"%SystemRoot%/system32/CatRoot2"/r"users"/e
 cacls"%SystemRoot%/system32/Com"/r"users"/e
 cacls"%SystemRoot%/system32/config"/r"users"/e
 cacls"%SystemRoot%/system32/dhcp"/r"users"/e
 cacls"%SystemRoot%/system32/drivers"/r"users"/e
 cacls"%SystemRoot%/system32/export"/r"users"/e
 cacls"%SystemRoot%/system32/icsxml"/r"users"/e
 cacls"%SystemRoot%/system32/lls"/r"users"/e
 cacls"%SystemRoot%/system32/LogFiles"/r"users"/e
 cacls"%SystemRoot%/system32/MicrosoftPassport"/r"users"/e
 cacls"%SystemRoot%/system32/mui"/r"users"/e
 cacls"%SystemRoot%/system32/oobe"/r"users"/e
cacls"%SystemRoot%/system32/ShellExt"/r"users"/e
 cacls"%SystemRoot%/system32/wbem"/r"users"/e
 echo"添加iis_wpg的访问权限"
 cacls"%SystemRoot%"/giis_wpg:r/e
 cacls"%SystemDrive%/ProgramFiles/CommonFiles"/giis_wpg:r/e
 cacls"%SystemRoot%/DownloadedProgramFiles"/giis_wpg:c/e
 cacls"%SystemRoot%/Help"/giis_wpg:c/e
 cacls"%SystemRoot%/IISTemporaryCompressedFiles"/giis_wpg:c/e
 cacls"%SystemRoot%/OfflineWebPages"/giis_wpg:c/e
 cacls"%SystemRoot%/System32"/giis_wpg:c/e
 cacls"%SystemRoot%/Tasks"/giis_wpg:c/e
 cacls"%SystemRoot%/Temp"/giis_wpg:c/e
 cacls"%SystemRoot%/Web"/giis_wpg:c/e
 echo"添加iis_wpg的访问权限[.net专用]"
 cacls"%SystemRoot%/Assembly"/giis_wpg:c/e
 cacls"%SystemRoot%/Microsoft.NET"/giis_wpg:c/e
 echo"添加iis_wpg的访问权限[装了MACFEE的软件专用]"
 cacls"%SystemDrive%/ProgramFiles/NetworkAssociates"/giis_wpg:r/e
 echo"添加users的访问权限"
 cacls"%SystemRoot%/temp"/gusers:c/e

声明:本页内容来源网络,仅供用户参考;我单位不保证亦不表示资料全面及准确无误,也不保证亦不表示这些资料为最新信息,如因任何原因,本网内容或者用户因倚赖本网内容造成任何损失或损害,我单位将不会负任何法律责任。如涉及版权问题,请提交至online#300.cn邮箱联系删除。

相关文章