PowerStig
PowerStig copied to clipboard
IIS V-218814
Out of the box the permissions on C:\inetpub
are inherited to its child folders (e.g. wwwroot). The configuration of this rule effectively removes inheritance from several of the default users/groups (e.g. Administrators). This configuration breaks all access to wwwroot and the default website. Even administrator users cannot update the permissions on these child objects after this configuration takes effect. I think it is fair to infer that the text of this control does not mandate that these permissions are applied to this folder and inheritance is blocked.