Table #1: .NET NTFS Permissions Table
Folder |
Required Permission |
Account |
Comments |
C:\WINNT\Microsoft.Net\Framework\<version>\Temporary ASP.Net Files |
Full Control |
Process and fixed impersonation accounts |
This is the ASP.net dynamic compilation location. Application code is generated in a discrete directory for each application beneath this folder. The tempdir attribute on the <compilation> element can be used to change this default location. |
C:\WINNT\temp |
Read/Write/Delete |
Process |
Location used by Web services to generate serialization proxies. Note that the Delete permission is set using the Advanced button on the Security page of the Windows Explorer Folder properties dialog box. |
Application Folder |
Read |
Process |
The location of your Web application files (that is, your application’s virtual root directory: for example, c:\inetpub\wwwroot\webapp1). By default, the Users group has the appropriate access rights. |
%installroot% hierarchy (C:\WINNT\Microsoft.Net\Framework\<version>) |
Read |
Process and fixed impersonation accounts |
ASP.Net must be able to access .NET Framework assemblies. By default, the User group has he appropriate rights. |
C:\WINNT\assembly |
Read |
Process and fixed impersonation accounts |
This is the global assembly cache. You cannot directly use Windows Explorer to edit ACLs for this Folder. Instead, use a command Window and run the following command (One line): cacls %windir%/assembly /e /t /p domain\useraccount:R
Alternatively, prior to using Windows Explorer, unregister shfusion.dll with the following command: Regsvr32 –u shfusion.dll After setting permission with Windows Explorer, re-register shfusion.dll with the following command: Regsvr32 shfusion.dll |
Web site root: C:\inetpub\wwwroot\ or the path that the default Web site points to |
Read |
Process |
ASP.NET reads configuration files and monitors for file changes in this folder. |
C:\WINNT\system32 |
Read |
Process |
For system DLLs loaded by the Framework. |
Parent directories of context |
List Folder / Read |
Process |
For file change notification and the C# compiler. |