您如何允许 IIS 访问符号链接文件夹？

Question

I have a two webservers, on each webserver in the C:\inetpub\logs\LogFiles I have created a symbolic link to the other servers log file folders, so essentially I can be logged in to one of the webservers and see the logs on both servers in one place. This works perfectly.

I am building a webpage to make the log files available via a webpage, the code simply goes to the C:\inetpub\logs\LogFiles directory and lists the files in each sub folder, ie W3SVC1 (the local folder) and webserver2-w3svc1 (the remote log folder).

For the local folders it works fine, but I am getting the "access denied" error when trying to call Directory.GetFiles on the symlinkd folder. I suspect this is some sort of permissions error, but I tried giving the symlinkd folder full permissions to "everyone" but I still get the same error.

Is this something to do with the fact that when I created the symlinkd I had to enter the username and password of the webserver2, and these credentials cannot be accessed/used by IIS when trying to get access to the folder?

Is there anything I can do allow IIS to access the contents of this symlinkd folder?

Answer 1

I don't think you need to use a symlink, you can create a virtual directory mapping to that directory in IIS, just map it to the target path. In IIS, right click on the website and select Add Virtual Directory.

For more information, please refer to this official document .

Answer 2

After much experimentation, the only way to do this is as follows:

1. Create a new user on the computer.
2. Run the AppPool in IIS under this new users' identity as opposed to the default IUSR account.
3. Give the folder you are sharing permissions to this user AND 'share' this folder with the new user.