Preventing Local Access to IIS Server

Question

I have a PC that is used as a server, its OS is Win2008 R2 and the application is developed by ASP.NET 2012 and C#. The server is dedicated to my application and is placed in the user location. Since I can't physically protect unauthorized access to server I'm looking for a suitable method to preventing another person has access to files on the server. I know I can set login password but the HDD can be remove and install on another PC. Is there any way that only IIS Server has permission to access data? (Or any other reliable solution)

Thank in advance, Reza

Answer 1

yes,you can set access to your root folder to only IIS_IUSERS.also you can modify read/write access.