note 91034 deleted from function.exec by cmb
| From: | cmb@php.net | Date: | Sun, 22 Sep 2019 07:17:57 +0000 |
| Subject: | note 91034 deleted from function.exec by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-212269@lists.php.net to get a copy of this message | ||
Note Submitter: greg dot fenton at gmail dot com
----
It is possible to configure IIS so that user authentication is against an NT domain. Giving read
& execute permissions to the IUSR_* user only helps for anonymous access.
For non-anonymous, give "Domain Users" read & execute permissions:
c:> cacls %COMSPEC% /E /G "%USERDOMAIN%\Domain Users":R
or more specifically:
c:> cacls c:\windows\system32\cmd.exe /E /G MYDOMAIN\Domain Users:R
For security reasons, it is strongly advised to NOT provide the IUSR_* access to cmd.exe at all.