Home / server / Questions / 273875
Accepted
Pure.Krome
Asked: 2011-05-26 16:38:44 +0800 CST

Can we use wildcards with NETSH HTTP ADD URLACL in Windows 7 / 2008r2?

  • 772

i'm using IIS7 express and therefore need to unblock port 80 if I wish to hit the website locally and on the default http port. To do this, i use ..

netsh http add urlacl url=http://my.custom.locahost.domain.com:80/ user=mydomain\myusername

is it possible to say something like

netsh http add urlacl url=*:80/ user=*

so basically, anything going to port 80, by anyone, is allowed?

windows iis netsh iis-express

4 Answers

  1. netsh http add urlacl url=http://+:80/ user=Everyone

    Note that the valid value for user actually depends on your system language (Everyone for English, Jeder for German).

    • 25

  2. Basing on @jgillich answer, I propose to do the following:

    netsh http add urlacl url=http://+:80/ sddl=D:(A;;GX;;;S-1-1-0)

    sddl argument will be virtually the same as user, but you don't need to think of a localized group name. So, it's more universal.

    • 15
  3. Best Answer

    See here: http://msdn.microsoft.com/en-us/library/ms733768.aspx which shows this:

    netsh http add urlacl url=http://+:80/MyUri user=DOMAIN\user

    My understanding is that it will listening to anything at port 80 and if you want it linked to a specific address, you'd actually have to unbind it. That's what I have to do if I want to run IIS and Apache on the same box with both listening to port 80.

    For the user, domain\domain users should be a valid domain group which includes everyone.

    • 5

  4. My best guess was to set exactly the same url you add to the listener and do:

     netsh http add urlacl url="[exact same value]" user=%USERDOMAIN%\%USERNAME%
    • 1