Users May Gain Access to Edit the FrontPage PWP Root Web

When you install Microsoft Commercial Internet System (MCIS) Personal Web Pages (PWP) with the FrontPage Server Extensions by following the instructions in the "Install MCIS 2.5 PWP" section in the "MCIS 2.5 Training Guide," which is included in the MCIS 2.5 Resource Kit, you may be able to gain access with all PWP users when you try to connect to and edit the PWP root Web with the FrontPage Client.

Users are able to access the root Web because the default NTFS permissions on the root Web are set to Everyone-Full Control. FrontPage uses NTFS permissions to verify if you have Browse, Author, or Administrator permissions for the Web.

To change this behavior, change the NTFS permissions for the root Web to Read access for the MemProxyUser.