Table #1: .NET NTFS Permissions Table

Folder

Required Permission

Account

Comments

C:\WINNT\Microsoft.Net\Framework\<version>\Temporary ASP.Net Files

Full Control

Process and fixed impersonation accounts

This is the ASP.net dynamic compilation location. Application code is generated in a discrete directory for each application beneath this folder. The tempdir attribute on the <compilation> element can be used to change this default location.

C:\WINNT\temp

Read/Write/Delete

Process

Location used by Web services to generate serialization proxies. Note that the Delete permission is set using the Advanced button on the Security page of the Windows Explorer Folder properties dialog box.

Application Folder

Read

Process

The location of your Web application files (that is, your application’s virtual root directory: for example, c:\inetpub\wwwroot\webapp1). By default, the Users group has the appropriate access rights.

%installroot% hierarchy

(C:\WINNT\Microsoft.Net\Framework\<version>)

Read

Process and fixed impersonation accounts

ASP.Net must be able to access .NET Framework assemblies. By default, the User group has he appropriate rights.

C:\WINNT\assembly

Read

Process and fixed impersonation accounts

This is the global assembly cache. You cannot directly use Windows Explorer to edit ACLs for this Folder. Instead, use a command Window and run the following command (One line):

cacls %windir%/assembly /e /t /p domain\useraccount:R

 

Alternatively, prior to using Windows Explorer, unregister shfusion.dll with the following command:

Regsvr32 –u shfusion.dll

After setting permission with Windows Explorer, re-register shfusion.dll with the following command:

Regsvr32 shfusion.dll

Web site root:

C:\inetpub\wwwroot\ or the path that the default Web site points to

Read

Process

ASP.NET reads configuration files and monitors for file changes in this folder.

C:\WINNT\system32

Read

Process

For system DLLs loaded by the Framework.

Parent directories of context

List Folder / Read

Process

For file change notification and the C# compiler.