Problem: a specific Global Security Group can not load ASP pages (but can load HTML pages). Goal: allow access to the secure website files and directories according to Global Group membership. This is a medical industry customer, so HIPAA compliance is mandatory (i.e. file access and restrictions must...

I notice that by default .dll files(outside bin folder) can be downloaded. How can I stop it so that whenever a user requests to a .dll file, some error will be returned, like 404 - file not found? I tried to remove .dll extension from MINE types setting, but .dlls still can be downloaded. Thank you

Hi Everyone, I'm trying to secure a Shared Hosting Environment on a Windows 2003 Server / IIS 6 My approche so far: 1) created an Application Pool User for each of the Site (all members of the IIS_WPG Group) 2) created an Application Pool for each Site and assigned them to the Sites 3) assigned the...