File and folder permissions

    To ensure a stable and smoothly running Umbraco installation, these permissions need to be set correctly. These permissions should be setup before or during the installation of Umbraco. The main account that requires 'modify' file permissions to be set on the folders below, is the account used by the Application Pool Identity for the IIS website (usually IIS APPPOOL\appPoolName or a specific local account or in some circumstances Network Service - If in doubt, ask your server admin / hosting company). Additionally the IUSR account and IIS_IUSRS account only require 'read only' access to the site's folders. Generally when developing locally with Visual Studio or WebMatrix, permissions do not need to be strictly applied

    File / folder Permission Comment
    /Web.config Modify / Full control

    Only needed for setting database and version Information during installation. So can be set to read-only afterwards for enhanced security

    /App_Code Modify / Full control

    Should always have modify rights as the folder and its files are used for dynamically loading in and generating dlls

    /App_Data Modify / Full control

    Should always have modify rights as the folder and its files are used for cache and storage

    /App_Plugins Modify / Full control

    Should always have modify rights as the folder and its files are used by packages

    /Bin Modify / Full control

    Needed for installing packages, if no packages are installed, this can be set to read accees only

    /Config Modify / Full control

    Only needed for setting database and version Information during installation. So can be set to read-only afterwards for enhanced security

    /Css Modify / Full control

    Should always have modify rights as the folder and its files are used for css files

    /Masterpages Modify / Full control

    Should always have modify rights as the folder and its files are used for template files

    /Media Modify / Full control

    Should always have modify rights as the folder and its files are used for media files uploaded via Umbraco CMS interface

    /Scripts Modify / Full control

    Should always have modify rights as the folder and its files are used for script files

    /Umbraco Modify / Full control

    For upgrades and package installation, it should have modify rights, but can be set to read-only afterwards

    /Umbraco_client Modify / Full control

    For upgrades and package installation, it should have modify rights, but can be set to read-only afterwards

    /UserControls Modify / Full control

    Modify rights are needed for installing packages

    /Views Modify / Full control

    Should always have modify rights as the folder and its files are used for template, partial view and macro files

    /Xslt Modify / Full control

    Should always have modify rights as the folder and its files are used for macro files