Improving Web Application Security: Threats and - CGISecurity

578 Part IV: Securing Your Network, Host, and ApplicationTable 19.3 Required NTFS Permissions for ASP.NET Process AccountsDirectoryRequired permissionsTemporary ASP.NET FilesProcess account and impersonated identities:%windir%\Microsoft.NET\Framework\{version}Temporary ASP.NET FilesTemporary Directory(%temp%).NET Framework directory%windir%\Microsoft.NET\Framework\{version}.NET Framework configuration directory%windir%\Microsoft.NET\Framework\{version}\CONFIGWeb site rootC:\inetpub\wwwrootFull ControlProcess account:Full ControlProcess account and impersonated identities:Read and ExecuteList Folder ContentsReadProcess account and impersonated Identities:Read and ExecuteList Folder ContentsReadProcess account:Reador the path that the default Web site points toSystem root directory%windir%\system32Global assembly cache%windir%\assemblyContent directoryC:\inetpub\wwwroot\YourWebAppProcess account:ReadProcess account and impersonated identities:ReadProcess account:Read and ExecuteList Folder ContentsReadNote With .NET Framework version 1.0, allparent directories, back up to the file system rootdirectory, also require the above permissions.Parent directories include:C:\C:\inetpub\C:\inetpub\wwwroot\