???? ID: 812614 - ????? ???????: 05 ?????? 2010 - ??????: 2.0

???????? ????????? ?? IIS 6.0 ?? ??? ?????????? ??????

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

?? ????? ??

??? ?? ??????? ???? | ??? ?? ??????? ????

?????

?? ???? ????? ?? ???????? ????????? ?? ?????????? ?????? ?? ?? ?? ??????? ????????? ????? ?? ??????? ?????????? ???????? (IIS) 6.0 ??????? ???
????? ?? ???? ????

???? ???????

????? ???????? ??? NTFS ????? ?????? ?????????, ????????? ?????????, ?? Microsoft Windows ?????????? ?????? ???????? ??? ?? ??????? ?? ???? ???? ?? ??? Microsoft asp.NET ?? ??????? ???? ????? ??? ?? ??? ??? ??? ?? ???? ?? ?????? ???? ??? ??????? ???? focuses ?? ???? ???, ???? ????? ?????????? ????????? (FTP) ????, ?????? ??? ?????????? ????????? (SMTP) ????, ?? Microsoft FrontPage ????? ????????? (FPSE) ?? ????? ???? ???

???:?? ???????? ?? ????????? ?? ??? IUSR_MachineName ???? ?? interchangeably ?? ??? ????? ??? ???? ???? ???????? ???? ????
????? ?? ???? ????

NTFS ?????????

?? ?????? ?? ??????? ?????? ?????? ?? ??????? ????
??????????Users\Groups?????????
%WINDIR%\help\iishelp\common?????????????? ????????
%WINDIR%\help\iishelp\common?????????? ????????
%WINDIR%\help\iishelp\commonIIS_WPG?????, ?? ????????? ????
%WINDIR%\help\iishelp\common?????????? (????? ??? 1.)?????, ?? ????????? ????
??????? ??????? ??????? %WINDIR%\IIS?????????????? ????????
??????? ??????? ??????? %WINDIR%\IIS?????????? ????????
??????? ??????? ??????? %WINDIR%\IISIIS_WPG???? ????????
??????? ??????? ??????? %WINDIR%\IIS?????? ?????????? ????????
%WINDIR%\system32\inetsrv?????????????? ????????
%WINDIR%\system32\inetsrv?????????? ????????
%WINDIR%\system32\inetsrvUsers?????, ?? ????????? ????
%WINDIR%\system32\inetsrv\*.vbs?????????????? ????????
%WINDIR%\system32\inetsrv\ASP ???????? ?????? ?????????????????? ????????
%WINDIR%\system32\inetsrv\ASP ???????? ?????? ????IIS_WPG???? ????????
%WINDIR%\system32\inetsrv\History?????????????? ????????
%WINDIR%\system32\inetsrv\History?????????? ????????
%WINDIR%\system32\Logfiles?????????????? ????????
%WINDIR%\system32\inetsrv\metaback?????????????? ????????
%WINDIR%\system32\inetsrv\metaback?????????? ????????
Inetpub\Adminscripts?????????????? ????????
Inetpub\wwwroot (?? ??????? ????????????)?????????????? ????????
Inetpub\wwwroot (?? ??????? ????????????)?????????? ????????
Inetpub\wwwroot (?? ??????? ????????????)IIS_WPG?????, ?? ????????? ????
Inetpub\wwwroot (?? ??????? ????????????)IUSR_MachineName?????, ?? ????????? ????
Inetpub\wwwroot (?? ??????? ????????????)ASPNET (????? ??? 2.)?????, ?? ????????? ????
??? 1?? ???? ?????? ?????????? ?? ?????? ?????????? ?? ?? ????? ????????? ???????? ?? ?? ????? ???? ?? ??? ?? ?????????? ?? ?????? ???? ?????? ??? ?????? ?? ???, ?? 401.1 ?????? ?? ???? ??, ?? ???-?? ?????????? ????? ???????? ??????? ????? ?????? ???? ??? 4011.htm ????? ?? ????? ?? ??? ????????? ?? ?????????? ?? ?? ?? ???

??? 2???????? ??? ??, ASP.NET IIS 5.0 isolation ??? ??? asp.NET ????????? ?? ????? ?? ??? ??? ????? ???? ???? ??? ASP.NET IIS 5.0 isolation ??? ?? ????? ??, ??? asp.NET ???? ?????? ????? ??????? ????????? ?? ??? ??? IIS ??? ??? asp.NET ????????? isolation ?? ??????? ??? ???????? ??????? ?? ???, ????? Microsoft ??? ???? ?? ????:

ASP.NET ????????? isolation
HTTP://www.Microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/e409289d-2786-4a34-bb7e-9c546602c2c8.mspx (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/e409289d-2786-4a34-bb7e-9c546602c2c8.mspx)
????? ?? ???? ????

????????? ?????????

?? ?????? ?? ??????? ?????? ?????? ?? ??????? ????
?????Users\Groups?????????
HKLM\System\CurrentControlSet\Services\ASP?????????????? ????????
HKLM\System\CurrentControlSet\Services\ASP?????????? ????????
HKLM\System\CurrentControlSet\Services\ASPIIS_WPG????
HKLM\System\CurrentControlSet\Services\HTTP?????????????? ????????
HKLM\System\CurrentControlSet\Services\HTTP?????????? ????????
HKLM\System\CurrentControlSet\Services\HTTPIIS_WPG????
HKLM\System\CurrentControlSet\Services\IISAdmin?????????????? ????????
HKLM\System\CurrentControlSet\Services\IISAdmin?????????? ????????
HKLM\System\CurrentControlSet\Services\IISAdminIIS_WPG????
HKLM\System\CurrentControlSet\Services\w3svc?????????????? ????????
HKLM\System\CurrentControlSet\Services\w3svc?????????? ????????
HKLM\System\CurrentControlSet\Services\w3svcIIS_WPG????
????? ?? ???? ????

Windows ?????????? ??????

?? ?????? ?? ??????? ?????? ?????? ?? ??????? ????
????Users
??????? ?? ?? ???????? ?? ???????????????
??????? ?? ?? ???????? ?? ?????ASPNET
??????? ?? ?? ???????? ?? ?????IUSR_MachineName
??????? ?? ?? ???????? ?? ?????IWAM_MachineName
??????? ?? ?? ???????? ?? ?????Users
?? ????????? ?? ??? ?????? ???? ???????? ??????????????
?? ????????? ?? ??? ?????? ???? ???????? ????IWAM_MachineName
?? ????????? ?? ??? ?????? ???? ???????? ??????????? ????
?? ????????? ?? ??? ?????? ???? ???????? ??????????? ????
?????? traverse ???? ?? ??? ??IIS_WPG
??? ?? ??????? ???? ?? ??? (??? ?????)??????????
??? ?? ??????? ???? ?? ??? (??? ?????)IUSR_MachineName
??????? ??? ?? ????? ??????????ASPNET
?????????? ?? ??? ?? ??????? ?? ????????????????????
?????????? ?? ??? ?? ??????? ?? ??????????ASPNET
?????????? ?? ??? ?? ??????? ?? ??????????IIS_WPG
?????????? ?? ??? ?? ??????? ?? ??????????????
?? ??? ?? ????? ?? ??? ??? ??? ??ASPNET
?? ??? ?? ????? ?? ??? ??? ??? ??IIS_WPG
?? ??? ?? ????? ?? ??? ??? ??? ??IUSR_MachineName
?? ??? ?? ????? ?? ??? ??? ??? ??IWAM_MachineName
?? ??? ?? ????? ?? ??? ??? ??? ????????? ????
???? ???? ?? ??? ??? ??? ?? ????ASPNET
???? ???? ?? ??? ??? ??? ?? ??????????? ????
????????? ???? ???? ?? ?????IWAM_MachineName
????????? ???? ???? ?? ???????????? ????
????????? ???? ???? ?? ???????????? ????
???:IIS 6.0, ?????????? ???? ?? ??? ?? ??? Microsoft Windows Server 2003 ?? ?? ??????? ??????? ??? ???? ?????? ?????? traverse ????????? ?? ???? ?? ??? ??? ????? ????????? ????? inherits ?????? traverse checking ????????? ?? ?????? ?? ?? ?????? ??? ?? ?? ??? ??? ????? ???? ?? ????? ??? ???? ???, ?? ?????? ???????? checking ????????? ?? ????? ????????? ?? ????? ???? inherit ?????? traverse ???? ????????? ?? ?????? ?? ????????? ?? ???? ?? ??? ??, ????? ????????? ??????? ???? ????? ??? ?????????? ???? ?? ???????? ???? ?? ?????? ?? ?????? ?? ???? ?????? checking ????????? ?? ????????, IIS_WPG ???? ?? ?????? ???? ?? ??? IIS ????? ???? ?? ??? ???????? ?? ??? ??? ???????

???:IIS 6.0, ?????? ?????????? ?? ???? ?? ??????? ?????? ?? ??? ??? ???????? ???? ??? ?? ?? ???LogonMethod??????? ??? ?? ?????? ?????????? ?? ???, NETWORK_CLEARTEXT ??? NETWORK_CLEARTEXT ????? ?????? ?? ??????? ??? ?? ?????????? ??? ?????? ??? ?? ???????? ???? ??? ?? ?? ???? ???? ?? ??? ???? ???????? ???????? ??????? ?? ???, IIS ??? ??? "?????? ?????????? ??????? ????? ??????" ???? ?? ?????? ?? ????? Microsoft ??? ???? ?? ???? ?? ?? ???? ???:

?????? ??????????
HTTP://www.Microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/cf438d2c-f9c7-4351-bf56-d2ab950d7d6e.mspx (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/cf438d2c-f9c7-4351-bf56-d2ab950d7d6e.mspx)
????? ?? ???? ????

??????

IIS ??????? ?? ?????? ???? ?? ??????????? ???? ?? ??? ???? ???? ?? ???? ??? ???? ??????? ?? ??? ????? Microsoft ??? ???? ?? ????:

Windows Server 2003 ??????? ????????????
HTTP://go.Microsoft.com/fwlink/?linkid=14845 (http://go.microsoft.com/fwlink/?linkid=14845)
Technet
HTTP://TechNet.Microsoft.com/en-us/library/dd450371.aspx (http://technet.microsoft.com/en-us/library/dd450371.aspx)
??? ????????? ??????? improving: ?????? ?? countermeasures
HTTP://MSDN.Microsoft.com/en-us/library/ms994921.aspx (http://msdn.microsoft.com/en-us/library/ms994921.aspx)
????? ?? ???? ????
???? ???? ???? ??:
  • Microsoft Internet Information Services 6.0
????? ?? ???? ????
??????: 
kbhowto kbinfo kbmt KB812614 KbMthi
????? ?? ???? ????
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:812614  (http://support.microsoft.com/kb/812614/en-us/ )
????? ?? ???? ????