{"id":3680,"date":"2013-03-29T06:49:27","date_gmt":"2013-03-29T06:49:27","guid":{"rendered":"http:\/\/www.greytrix.com\/blogs\/sagecrm\/?p=3680"},"modified":"2020-08-18T11:20:12","modified_gmt":"2020-08-18T11:20:12","slug":"how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory","status":"publish","type":"post","link":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/","title":{"rendered":"How to restrict Users from accessing Default IIS page and Virtual Directory"},"content":{"rendered":"

Sage CRM<\/a> being a web-based application requires a web server in order to function properly. The Primary role of this web server is to help store, process and deliver web pages as and when required to the users by means of HTTP. Now since Sage CRM is reliant on web server, IIS is one of the major pre-requisite and must be installed and configured prior to attempting CRM installation. But, have you ever focussed on securing access to the IIS server?<\/p>\n

Read More:<\/strong> <\/span>How can Greytrix help in Sage CRM and Sage ERP integration?<\/a><\/p>\n

Once you host any web applications or web services on IIS; your applications or other IIS directories are prone to data hack security concerns. By default, when you create a new IIS website it\u2019s typically open to everyone which simply means anyone can access and view the data being hosted by that site. Obviously, this is a security concern for most people\u00a0and because of vulnerability, a malicious user can gain access to the web root directory, and then escalate his permissions and gain access to the whole drive where the web root is.\u00a0<\/p>\n

Just by the mere access of browsing the default URL of IIS directory, the default IIS page opens up i.e. with the help of http:\/\/<Server Name>\/<\/u>. We eventually end up giving unnecessary access to server virtual directory. After that, it is very easy to hack other applications or web services hosted on that particular server which end up disclosing database server access.<\/p>\n


\"Default<\/a><\/p>\n

Default Wesite of IIS<\/i><\/span><\/center>\n

In order to restrict a user from accessing the directory and this default page, below are the steps to be followed<\/h4>\n
    \n
  1. In Run, type \u201cinetmgr\u201d. This will open IIS.<\/li>\n
  2. Go to Sites<\/strong> | Default Web Site<\/strong> and select Default Document <\/strong>property.<\/li>\n<\/ol>\n\n\n
    \n\"IIS<\/a>\n\n
    IIS – Default Web Site Options<\/i><\/center><\/font><\/p><\/figure><\/div>\n\n\n\n

    3. Double click on Default Document<\/strong> property. This will open Default document pages.<\/p>\n\n\n\n

    \n\"IIS<\/a>\n\n
    IIS – Default Document property<\/i><\/center><\/font><\/p><\/figure><\/div>\n\n\n\n

    4. Right click on Default.htm<\/strong> page and click on disable.
    5. Execute IIRESET.<\/p>\n\n\n\n

    After following the above steps, when we access the above URL error message will be displayed as follows – <\/p>\n\n\n\n
    \n\"IIS<\/a><\/p>\n

    <\/font><\/p>

    IIS Default Web Site Forbidden<\/i><\/font><\/center>

    <\/p>\n

    \n\n\n\n

    The most common reason for HTTP Error 403 is mistyped URL. Thus, in\norder to gain access to an application it is necessary to browse correct URL\nfor a web page or file and not just the directory. A regular URL would end in\n.com, .php, .org, .html, or just have an extension, while a directory URL would\nusually end with a \u201c\/\u201d.<\/p>\n\n\n\n

    In this way, you can make the configurations on servers to disallow\ndirectory browsing for security reasons. <\/p>\n\n\n\n

    About Us<\/strong><\/span><\/p>\n\n\n\n

    Greytrix \u2013 a globally recognized and one of the oldest Sage Development Partners is a one-stop solution provider for Sage ERP and Sage CRM organizational needs. Being acknowledged and rewarded for multi-man years of experience and expertise, we bring complete end-to-end assistance for your technical consultations, product customizations, data migration, system integrations, third-party add-on development, and implementation competence.<\/p>\n\n\n\n

    Greytrix\u00a0has some unique integration solutions developed for Sage CRM with Sage ERPs namely\u00a0Sage X3,\u00a0Sage Intacct,\u00a0Sage 100,\u00a0Sage 500,\u00a0and\u00a0Sage 300. We also offer best-in-class\u00a0Sage ERP\u00a0and\u00a0Sage CRM\u00a0customization and development services\u00a0to\u00a0Business\u00a0Partners,\u00a0End\u00a0Users, and Sage PSG worldwide. Greytrix\u00a0helps in\u00a0the migration of Sage CRM from\u00a0Salesforce | ACT! | SalesLogix | Goldmine | Sugar CRM | Maximizer. Our Sage CRM Product Suite includes\u00a0add-ons like\u00a0 Greytrix Business Manager,\u00a0Sage CRM Project Manager,\u00a0Sage CRM Resource Planner,\u00a0Sage CRM Contract Manager,\u00a0Sage CRM Event Manager,\u00a0Sage CRM Budget Planner,\u00a0Gmail Integration,\u00a0Sage CRM Mobile Service Signature,\u00a0Sage CRM CTI Framework.<\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/p>\n\n\n\n

    Greytrix is a recognized\u00a0Sage Champion Partner\u00a0for GUMU™ Sage X3 \u2013 Sage CRM integration listed on\u00a0Sage Marketplace and Sage CRM \u2013 Sage Intacct integration listed on Sage Intacct Marketplace. The GUMU™ Cloud framework by Greytrix forms the backbone of cloud integrations that are managed in real-time for the processing and execution of application programs at the click of a button.<\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/p>\n\n\n\n

    For more information on our integration solutions, please contact us at sage@greytrix.com<\/a>. We will be glad to assist you.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Sage CRM being a web-based application requires a web server in order to function properly. The Primary role of this web server is to help store, process and deliver web pages as and when required to the users by means of HTTP. Now since Sage CRM is reliant on web server, IIS is one of\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[332,12,19,32,65,73,119,180,181,182,188,189,190,355,356,414,417,429],"tags":[2650,1381,3541,3560,3561,3562,3563],"class_list":["post-3680","post","type-post","status-publish","format-standard","hentry","category-sage-crm","category-active-directory","category-administrator","category-authentication-prompt","category-codeless","category-configuration","category-display","category-iis","category-iis7","category-iisreset","category-inetmgr","category-information","category-installation","category-secure","category-security","category-url-sage-crm","category-user","category-web-client-sage-saleslogix-2","tag-accessing-iis-page","tag-iis","tag-inetmgr","tag-restrict-users-from-accessing-iis-page","tag-sage-crm-technical-assistance","tag-sage-crm-technical-blogs","tag-virtual-directory-restrict"],"yoast_head":"\nHow to restrict Users from accessing Default IIS page and Virtual Directory - Sage CRM \u2013 Tips, Tricks and Components<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to restrict Users from accessing Default IIS page and Virtual Directory - Sage CRM \u2013 Tips, Tricks and Components\" \/>\n<meta property=\"og:description\" content=\"Sage CRM being a web-based application requires a web server in order to function properly. The Primary role of this web server is to help store, process and deliver web pages as and when required to the users by means of HTTP. Now since Sage CRM is reliant on web server, IIS is one of\u2026 Read More »\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/\" \/>\n<meta property=\"og:site_name\" content=\"Sage CRM \u2013 Tips, Tricks and Components\" \/>\n<meta property=\"article:published_time\" content=\"2013-03-29T06:49:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-08-18T11:20:12+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg\" \/>\n<meta name=\"author\" content=\"greysagecrm\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"greysagecrm\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/\",\"url\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/\",\"name\":\"How to restrict Users from accessing Default IIS page and Virtual Directory - Sage CRM \u2013 Tips, Tricks and Components\",\"isPartOf\":{\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg\",\"datePublished\":\"2013-03-29T06:49:27+00:00\",\"dateModified\":\"2020-08-18T11:20:12+00:00\",\"author\":{\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#\/schema\/person\/e7ff1c8f4763b47730d6bc5e74d59c1f\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#primaryimage\",\"url\":\"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg\",\"contentUrl\":\"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to restrict Users from accessing Default IIS page and Virtual Directory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#website\",\"url\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/\",\"name\":\"Sage CRM \u2013 Tips, Tricks and Components\",\"description\":\"Explore the possibilities with Sage CRM insights through our comprehensive blogs. As a leading Sage partner, Greytrix helps businesses maximize their Sage CRM potential with its rich expertise and immense knowledge. Here, you will find blogs that feature expert advice, tips & tricks, best practices, and comprehensive guides on customizing and configuring Sage CRM for your business. Stay informed with our regular updates and expert insights!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#\/schema\/person\/e7ff1c8f4763b47730d6bc5e74d59c1f\",\"name\":\"greysagecrm\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c3b4325cb326e36467f945b9b9adf2bb85e907fe092d42eb36b39743b492e626?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c3b4325cb326e36467f945b9b9adf2bb85e907fe092d42eb36b39743b492e626?s=96&d=mm&r=g\",\"caption\":\"greysagecrm\"},\"url\":\"https:\/\/www.greytrix.com\/blogs\/sagecrm\/author\/greysagecrm\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to restrict Users from accessing Default IIS page and Virtual Directory - Sage CRM \u2013 Tips, Tricks and Components","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/","og_locale":"en_US","og_type":"article","og_title":"How to restrict Users from accessing Default IIS page and Virtual Directory - Sage CRM \u2013 Tips, Tricks and Components","og_description":"Sage CRM being a web-based application requires a web server in order to function properly. The Primary role of this web server is to help store, process and deliver web pages as and when required to the users by means of HTTP. Now since Sage CRM is reliant on web server, IIS is one of\u2026 Read More »","og_url":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/","og_site_name":"Sage CRM \u2013 Tips, Tricks and Components","article_published_time":"2013-03-29T06:49:27+00:00","article_modified_time":"2020-08-18T11:20:12+00:00","og_image":[{"url":"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg","type":"","width":"","height":""}],"author":"greysagecrm","twitter_card":"summary_large_image","twitter_misc":{"Written by":"greysagecrm","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/","url":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/","name":"How to restrict Users from accessing Default IIS page and Virtual Directory - Sage CRM \u2013 Tips, Tricks and Components","isPartOf":{"@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#primaryimage"},"image":{"@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#primaryimage"},"thumbnailUrl":"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg","datePublished":"2013-03-29T06:49:27+00:00","dateModified":"2020-08-18T11:20:12+00:00","author":{"@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#\/schema\/person\/e7ff1c8f4763b47730d6bc5e74d59c1f"},"breadcrumb":{"@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#primaryimage","url":"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg","contentUrl":"http:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-content\/uploads\/2013\/03\/IIS-Image1.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/2013\/03\/29\/how-to-restrict-users-from-accessing-default-iis-page-and-virtual-directory\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/"},{"@type":"ListItem","position":2,"name":"How to restrict Users from accessing Default IIS page and Virtual Directory"}]},{"@type":"WebSite","@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#website","url":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/","name":"Sage CRM \u2013 Tips, Tricks and Components","description":"Explore the possibilities with Sage CRM insights through our comprehensive blogs. As a leading Sage partner, Greytrix helps businesses maximize their Sage CRM potential with its rich expertise and immense knowledge. Here, you will find blogs that feature expert advice, tips & tricks, best practices, and comprehensive guides on customizing and configuring Sage CRM for your business. Stay informed with our regular updates and expert insights!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#\/schema\/person\/e7ff1c8f4763b47730d6bc5e74d59c1f","name":"greysagecrm","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c3b4325cb326e36467f945b9b9adf2bb85e907fe092d42eb36b39743b492e626?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c3b4325cb326e36467f945b9b9adf2bb85e907fe092d42eb36b39743b492e626?s=96&d=mm&r=g","caption":"greysagecrm"},"url":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/author\/greysagecrm\/"}]}},"_links":{"self":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/posts\/3680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/comments?post=3680"}],"version-history":[{"count":6,"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/posts\/3680\/revisions"}],"predecessor-version":[{"id":24453,"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/posts\/3680\/revisions\/24453"}],"wp:attachment":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/media?parent=3680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/categories?post=3680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagecrm\/wp-json\/wp\/v2\/tags?post=3680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}