note 91034 modified in function.exec by danbrown
| From: | danbrown@php.net | Date: | Fri, 22 May 2009 14:45:49 +0000 |
| Subject: | note 91034 modified in function.exec by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-155886@lists.php.net to get a copy of this message | ||
It is possible to configure IIS so that user authentication is against an NT domain. Giving read
& execute permissions to the IUSR_* user only helps for anonymous access.
For non-anonymous, give "Domain Users" read & execute permissions:
c:> cacls %COMSPEC% /E /G "%USERDOMAIN%\Domain Users":R
or more specifically:
c:> cacls c:\windows\system32\cmd.exe /E /G MYDOMAIN\Domain Users:R
For security reasons, it is strongly advised to NOT provide the IUSR_* access to cmd.exe at all.
--was--
It is possible to configure IIS so that user authentication is against an NT domain. Giving read
& execute permissions to the IUSR_* user only helps for anonymous access.
For non-anonymous, give "Domain Users" read & execute permissions:
c:> cacls %COMSPEC% /E /G %USERDOMAIN%\Domain Users:R
or more specifically:
c:> cacls c:\windows\system32\cmd.exe /E /G MYDOMAIN\Domain Users:R
For security reasons, it is strongly advised to NOT provide the IUSR_* access to cmd.exe at all.
http://php.net/manual/en/function.exec.php