How can I disable parent paths in IIS?

A. Parent paths allow you to use '..' when browsing directories and MapPaths etc enabling files in the parent directory to be used. This can give access to files that people should not have access to and so to disable perform the following:

  1. Start the Internet Services Manager (Start - Programs - Administrative Tools - Internet Services Manager)
  2. Right click on the web site and select properties
  3. Select the 'Home Directory' tab
  4. Click the 'Configuration' button under the Application Settings
  5. Select the 'App Options' tab
  6. Blank the 'Enable parent paths' box and click Apply
    Click here to view image
  7. If there are any child nodes affected they will be listed, select and click OK
  8. Click OK to all other dialog boxes

You don't need to restart the service for the change to take effect.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.