You can verify the permissions of your IIS installation and server files using the Permissions Verifier. This makes use of an XML file to test user and group permissions. The resource kit comes with five sample templates:
FileSystem.xml checks file system permissions.
Registry.xml checks permissions stored in the registry.
Metabase.xml checks permissions stored in the Metabase.
RightsPolicies.xml checks policies.
IIS6MinPermsVerif.xml checks server permissions.
To use, execute the PermVerif.js script from a command prompt, and use the ?Config:filename argument to specify the name of an XML configuration file.
You can see an example of the output here:
Microsoft (R) Windows Script Host Version 5.6 Copyright (C) Microsoft Corporation 1996-2001. All rights reserved. Using checks in file C:\Program Files\IIS Resources\ [ic:ccc]Permissions Verifier\samples\filesystem.xml FILESYSTEM: C:\WINDOWS FAIL: [MXPWIN2003EE\Administrator] Full:false FAIL: [NT AUTHORITY\SYSTEM] Full:false FAIL: [BUILTIN\Users] Read:false All checks failed. CheckTypes Passed: 0 CheckTypes Failed: 1 Checks Passed: 0 Checks Failed: 3 Checks Fixed : 0
For more details, including how to build your own XML documents, see the documentation that comes with the resource kit.