How to Set Permissions on a FrontPage Web on IIS

This article describes how to set permissions using FrontPage on a FrontPage Extended Web that resides on an IIS Web Server. The article also advises how to set your initial permissions optimally.

On an IIS Web server on an NTFS partition, the Everyone group has Full Control access by default. Therefore, when you install the FrontPage Server Extensions, FrontPage detects that the Everyone group has Full Control access to the content folder and adds the Everyone group, with its permissions, to the FrontPage Extended Web. At the same time, FrontPage reduces the permissions of the Everyone group to Browse access. However, even though the Everyone group has been reduced to Browse access, it is not recommended to set initial permissions this way. Use the following steps to set your initial permissions:

1. Using FrontPage, open your Web that resides on the IIS Web server.
2. On the Tools menu, click Security, and then click Permissions.
3. On the Groups tab, remove the Everyone Group if it is listed.
4. Click Apply, and then click OK.
5. On the Tools menu, click Security, and then click Permissions.
6. Click the Users tab and on the bottom of the tab, select the radio button for Everyone has browse access.
7. Click Apply, and then click OK.
8. After making this change, you should find that your Web is still browsable, but accounts that have not explicitly been granted permission, cannot open the Web.

After removing the Everyone group, you can add accounts to the Web for Authoring or Administering the FrontPage Web. There are three permission settings that you can choose from for your groups and individual accounts: Browse, Author, and Administer. Accounts that have Browse permission cannot open the Web in FrontPage, but can browse the content. Accounts that have Author permission can open the Web and edit the contents of the Web in FrontPage. Accounts that have Administer permission can open the Web, edit the contents of the site, create new subwebs or nested Webs, and modify permissions on the Web in FrontPage. To add new accounts with Browse, Author, or Administer permissions, do the following:

1. Using FrontPage, open your Web that resides on the IIS Web server.
2. On the Tools menu, click Security, and then click Permissions.
3. Click the Users tab.
4. Click the Add button.
5. In the Obtain List From: box, select the server or domain from which you want to add accounts.
6. Under Names:, select the accounts you want to add with permission to this Web and click Add>>.
7. Under Allow users to: select the level of permissions for the accounts you added.
8. Click OK.
9. If you need to edit permissions for any account, select the account and click the Edit button.
10. Click Apply, and then click OK.
11. You can follow the same procedures listed above for adding new groups with permission to the Web.
12. Remember, when you add new accounts and groups to your Web, make sure not to add the IUSR_computername account, the Everyone group, or any group that contains the IUSR_computername account.