iis 7 - IIS Security and Wordpress -

we self hosting wordpress on iis 7, 2008 server.

to allow automatic updates wordpress code base, had set following permissions on wordpress root installation folder:

is secure configuration?

thanks in advance, chris

no,

first -

you should remove inheritance @ wwwroot , add system (full control) , administrators (full control)

second -

create administrator account application path website , use instead of basic pass through authentication (basic settings)

third -

change app pool use applicationpoolidentity , add permissions iis apppool\my app pool root of website , give read permission.

GHI