XADM: Setting Permissions on Virtual Directories in a Front-End and Back-End Deployment

You can control access to the content that is associated with a virtual directory by setting permissions on the virtual directory. If your deployment of Exchange 2000 includes front-end and back-end servers, view Internet Services Manager on each server to see a default Web site that has Exchange 2000 virtual directories.

The virtual directories on the front-end servers connect to external users. However, to control access to content, you must use the virtual directories on the back-end servers to set permissions. Exchange 2000 is designed so that only the back-end server propagates permissions for its virtual directories.

NOTE: The procedure that you use to set virtual directory permissions is different from the procedure that you use to set logon rights. Logon rights include Log on locally, which Microsoft Outlook Web Access clients might have to access the virtual directories. You must set these rights on the front-end computer by using the Local Security Settings console.

For more information about how to set permissions on virtual directories in Internet Services Manager, see "Setting NTFS Permissions for a Directory or File" in the Microsoft Internet Information Services (IIS) 5.0 online documentation.

For more information about Exchange 2000 front-end and back-end architecture, see the front-end and back-end architecture topics in the Exchange 2000 online documentation.

For additional information about how to configure the virtual directory, click the article numbers below to view the articles in the Microsoft Knowledge Base: