Let IIS not support downloading and accessing exe files through IIS

I recently worked on a Web project using Windows 2003 and IIS as a publishing server. For some security reasons, you need to disable some download functions of IIS so that it does not support download access of exe format files. What should I do?

A: It can be done, and there are many ways. One is to use the MIME type supported by IIS 6. The specific steps are to click "Start" - "Control Panel" - "Administrative Tools" - "Internet Information Services (IIS) Manager", right click on "Local Computer", select "Properties", click "In the pop-up window" The MIME Type button removes the ".exe" item from the "Registered MIME Type". Using this method, we can also add file types that support downloading for IIS. Adding can be global--added from "local computer", or right-click on the site that needs to support file downloading of this format to enter "properties" The "HTTP Header" tab, in which the "MIME Type" button is pressed to "New".

In addition to adjusting the MIME type, you can also use the security permissions of the NTFS format partition to remove the read permission of the corresponding file, so that users can not download. In addition, Microsoft's official URLScan (http://www.microsoft.com/china/technet/security/guidance/secmod114.mspx) can block file downloads with arbitrary extensions and can be applied to IIS 5 in Windows 2000 Server. It is also a good solution.