随着Server2008越走越近，很多用户又一次关注IIS的安全问题，笔者整理介绍在IIS下最小权限分配的批处理文件……
复制代码 代码如下:
@echooff
echo"权限设定"
echo"删除C盘的everyone的权限"
cd/
cacls"%SystemDrive%"/r"everyone"/e
cacls"%SystemRoot%"/r"everyone"/e
cacls"%SystemRoot%/Registration"/r"everyone"/e
cacls"%SystemDrive%/DocumentsandSettings"/r"everyone"/e
echo"删除C盘的所有的users的访问权限"
cd/
cacls"%SystemDrive%"/r"users"/e
cacls"%SystemDrive%/ProgramFiles"/r"users"/e
cacls"%SystemDrive%/DocumentsandSettings"/r"users"/e
cacls"%SystemRoot%"/r"users"/e
cacls"%SystemRoot%/addins"/r"users"/e
cacls"%SystemRoot%/AppPatch"/r"users"/e
cacls"%SystemRoot%/ConnectionWizard"/r"users"/e
cacls"%SystemRoot%/Debug"/r"users"/e
cacls"%SystemRoot%/DriverCache"/r"users"/e
cacls"%SystemRoot%/Help"/r"users"/e
cacls"%SystemRoot%/IISTemporaryCompressedFiles"/r"users"/e
cacls"%SystemRoot%/java"/r"users"/e
cacls"%SystemRoot%/msagent"/r"users"/e
cacls"%SystemRoot%/mui"/r"users"/e

cacls"%SystemRoot%/repair"/r"users"/e
　cacls"%SystemRoot%/Resources"/r"users"/e
　cacls"%SystemRoot%/security"/r"users"/e
　cacls"%SystemRoot%/system"/r"users"/e
　cacls"%SystemRoot%/TAPI"/r"users"/e
　cacls"%SystemRoot%/Temp"/r"users"/e
　cacls"%SystemRoot%/twain_32"/r"users"/e
　cacls"%SystemRoot%/Web"/r"users"/e
　cacls"%SystemRoot%/WinSxS"/r"users"/e
　cacls"%SystemRoot%/system32/3com_dmi"/r"users"/e
　cacls"%SystemRoot%/system32/administration"/r"users"/e
　cacls"%SystemRoot%/system32/Cache"/r"users"/e
　cacls"%SystemRoot%/system32/CatRoot2"/r"users"/e
　cacls"%SystemRoot%/system32/Com"/r"users"/e
　cacls"%SystemRoot%/system32/config"/r"users"/e
　cacls"%SystemRoot%/system32/dhcp"/r"users"/e
　cacls"%SystemRoot%/system32/drivers"/r"users"/e
　cacls"%SystemRoot%/system32/export"/r"users"/e
　cacls"%SystemRoot%/system32/icsxml"/r"users"/e
　cacls"%SystemRoot%/system32/lls"/r"users"/e
　cacls"%SystemRoot%/system32/LogFiles"/r"users"/e
　cacls"%SystemRoot%/system32/MicrosoftPassport"/r"users"/e
　cacls"%SystemRoot%/system32/mui"/r"users"/e
　cacls"%SystemRoot%/system32/oobe"/r"users"/e
cacls"%SystemRoot%/system32/ShellExt"/r"users"/e
　cacls"%SystemRoot%/system32/wbem"/r"users"/e
　echo"添加iis_wpg的访问权限"
　cacls"%SystemRoot%"/giis_wpg:r/e
　cacls"%SystemDrive%/ProgramFiles/CommonFiles"/giis_wpg:r/e
　cacls"%SystemRoot%/DownloadedProgramFiles"/giis_wpg:c/e
　cacls"%SystemRoot%/Help"/giis_wpg:c/e
　cacls"%SystemRoot%/IISTemporaryCompressedFiles"/giis_wpg:c/e
　cacls"%SystemRoot%/OfflineWebPages"/giis_wpg:c/e
　cacls"%SystemRoot%/System32"/giis_wpg:c/e
　cacls"%SystemRoot%/Tasks"/giis_wpg:c/e
　cacls"%SystemRoot%/Temp"/giis_wpg:c/e
　cacls"%SystemRoot%/Web"/giis_wpg:c/e
　echo"添加iis_wpg的访问权限[.net专用]"
　cacls"%SystemRoot%/Assembly"/giis_wpg:c/e
　cacls"%SystemRoot%/Microsoft.NET"/giis_wpg:c/e
　echo"添加iis_wpg的访问权限[装了MACFEE的软件专用]"
　cacls"%SystemDrive%/ProgramFiles/NetworkAssociates"/giis_wpg:r/e
　echo"添加users的访问权限"
　cacls"%SystemRoot%/temp"/gusers:c/e