With IIS 3.0, the FileSystemObject ran with SYSTEM permissions and 
had full access to anything that the SYSTEM account had access to, 
which was pretty much everything.

With IIS 4.0, that changed and the FileSystemObject ran with 
IUSR_Machine permissions.  This limited file access but the 
IUSR_Machine account is a member of the Everyone group and the 
Everyone group has pretty liberal permissions.

With IIS 5.0, its pretty much the same.




On Tue, 26 Feb 2002 08:39:18 -0000, David Rooke wrote:
>Ken
>
>Thanks for your reply.
>
>I have tried this, but seems to return all the folders, whether the
>permissions are set or not.
>
>You only get an "access" error when you then try to access the file
>or folder thereafter.
>
>Regards Dave
>
>-----Original Message-----
>From: Ken Schaefer [mailto:ken@a...] Sent: 25 February
>2002 22:51 To: Security_asp Subject: [security_asp] Re: NT and File
>System Object
>
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From: "David
>Rooke" <david.rooke@o...> Subject: [security_asp]
>NT and File System Object
>
>
>: If I am using the filesystemobject to get a list of folders or
>files, : will it return the names of them regardless of the NT :
>security permissions set?
>: : I am trying to filter out the folders and/or files listed, if a
>user has : no permissions to these resources.
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>FSO will run either under IUSR_<machinename> or SYSTEM - I can't
>remember which.
>
>Surely this would be easy enough to test yourself. Just set a
>various permissions on a folder, and use the FSO to see which ones
>it can see, and which it can't.
>
>Cheers Ken
>
>
>---
>Change your mail options at http://p2p.wrox.com/manager.asp or to
>unsubscribe send a blank email to leave-security_asp
>-673724Y@p...
>
>
>
>---
>Change your mail options at http://p2p.wrox.com/manager.asp or to
>unsubscribe send a blank email to leave-security_asp-
>673724Y@p...
>