AccessFlags Metabase Property
Applies To: Windows Server 2003, Windows Server 2003 with SP1
The AccessFlags property contains flags for configuring file access permissions, which are defined in the Flags section. The last four flags augment the first four flags in that they relate to access granted to remote computers. You can enable local access without remote access, but you cannot enable remote access without local access.
| Attribute Name | Attribute Value |
|---|---|
XML Data Type |
DWORD |
WMI Data Type |
SINT32 |
ADSI Data Type |
DWORD |
ABO Data Type |
DWORD |
ABO Metabase Identifier |
MD_ACCESS_PERM |
Attributes |
INHERIT |
Default Value |
accessread |
MetaFlagsEx |
CACHE_PROPERTY_MODIFIED |
User Type |
IIS_MD_UT_FILE |
ID |
6016 |
Configurable Locations
You can configure this property at the following locations in the IIS metabase.
| Metabase Path | IIS Admin Object Type |
|---|---|
/LM/W3SVC/n/ROOT /LM/W3SVC/n/ROOT/virtual_directory_name |
IIsWebVirtualDir |
/LM/W3SVC/n |
IIsWebServer |
/LM/MSFTPSVC/n |
IIsFtpServer |
/LM/W3SVC |
IIsWebService |
/LM/MSFTPSVC |
IIsFtpService |
/LM/W3SVC/n/ROOT/file_name /LM/W3SVC/n/ROOT/virtual_directory_name/file_name |
IIsWebFile |
/LM/W3SVC/n/ROOT/physical_directory_name /LM/W3SVC/n/virtual_directory_name/physical_directory_name |
IIsWebDirectory |
/LM/MSFTPSVC/n/ROOT /LM/MSFTPSVC/n/ROOT/virtual_directory_name |
IIsFtpVirtualDir |
/LM/NNTPSVC |
IIsNntpService |
/LM/NNTPSVC/n |
IIsNntpServer |
/LM/NNTPSVC/n/ROOT /LM/NNTPSVC/n/ROOT/virtual_directory_name |
IIsNntpVirtualDir |
/LM/SMTPSVC |
IIsSmtpService |
/LM/SMTPSVC/n |
IIsSmtpServer |
/LM/SMTPSVC/n/ROOT /LM/SMTPSVC/n/ROOT/virtual_directory_name |
IIsSmtpVirtualDir |
Flags
| Flag Name | AccessExecute |
|---|---|
Description |
A value of true indicates that the file or the contents of the folder may be executed, regardless of file type. |
Metabase Bitmask Identifier |
MD_ACCESS_EXECUTE |
Decimal Value |
4 |
Hexadecimal Value |
0x00000004 |
| Flag Name | AccessSource |
|---|---|
Description |
A value of true indicates that users are allowed to access source code if either Read or Write permissions are set. Source code includes scripts in Microsoft Active Server Pages (ASP) applications. |
Metabase Bitmask Identifier |
MD_ACCESS_SOURCE |
Decimal Value |
16 |
Hexadecimal Value |
0x00000010 |
| Flag Name | AccessRead |
|---|---|
Description |
A value of true indicates that the file or the contents of the folder may be read through Microsoft Internet Explorer. |
Metabase Bitmask Identifier |
MD_ACCESS_READ |
Decimal Value |
1 |
Hexadecimal Value |
0x00000001 |
| Flag Name | AccessWrite |
|---|---|
Description |
A value of true indicates that users are allowed to upload files and their associated properties to the enabled directory on your server or to change content in a Write-enabled file. Write can be implemented only with a browser that supports the PUT feature of the HTTP 1.1protocol standard. |
Metabase Bitmask Identifier |
MD_ACCESS_WRITE |
Decimal Value |
2 |
Hexadecimal Value |
0x00000002 |
| Flag Name | AccessScript |
|---|---|
Description |
A value of true indicates that the file or the contents of the folder may be executed if they are script files or static content. A value of false only allows static files, such as HTML files, to be served. |
Metabase Bitmask Identifier |
MD_ACCESS_SCRIPT |
Decimal Value |
512 |
Hexadecimal Value |
0x00000200 |
| Flag Name | AccessNoRemoteExecute |
|---|---|
Description |
A value of true indicates that remote requests to execute applications are denied; only requests from the same computer as the IIS server succeed if the AccessExecute property is set to true. You cannot set AccessNoRemoteExecute to false to enable remote requests, and set AccessExecute to false to disable local requests. |
Metabase Bitmask Identifier |
MD_ACCESS_NO_REMOTE_EXECUTE |
Decimal Value |
8192 |
Hexadecimal Value |
0x00000400 |
| Flag Name | AccessNoRemoteRead |
|---|---|
Description |
A value of true indicates that remote requests to view files are denied; only requests from the same computer as the IIS server succeed if the AccessRead property is set to true. You cannot set AccessNoRemoteRead to false to enable remote requests, and set AccessRead to false to disable local requests. |
Metabase Bitmask Identifier |
MD_ACCESS_NO_REMOTE_READ |
Decimal Value |
4096 |
Hexadecimal Value |
0x00001000 |
| Flag Name | AccessNoRemoteWrite |
|---|---|
Description |
A value of true indicates that remote requests to create or change files are denied; only requests from the same computer as the IIS server succeed if the AccessWrite property is set to true. You cannot set AccessNoRemoteWrite to false to enable remote requests, and set AccessWrite to false to disable local requests. |
Metabase Bitmask Identifier |
MD_ACCESS_NO_REMOTE_WRITE |
Decimal Value |
1024 |
Hexadecimal Value |
0x00000400 |
| Flag Name | AccessNoRemoteScript |
|---|---|
Description |
A value of true indicates that remote requests to view dynamic content are denied; only requests from the same computer as the IIS server succeed if the AccessScript property is set to true. You cannot set AccessNoRemoteScript to false to enable remote requests, and set AccessScript to false to disable local requests. |
Metabase Bitmask Identifier |
MD_ACCESS_NO_REMOTE_SCRIPT |
Decimal Value |
16384 |
Hexadecimal Value |
0x00004000 |
Code Example
For general code examples, see Code Examples to Configure Metabase Properties.