locking a database directory in IIS

[scroce]

I have a database on my website containing semi-private information. It's not totally mission critical, but still I would like to take some measure of precaution that it doesn't accidentally or otherwise get downloaded or hacked.

I've noticed that if I go to:

http://www.myweb.com/datadirectory/mydatabase.mdb

I, or any user for that matter can download my db and see the data in it. So I have funny names for my direcories, but that seems to me to use the "run & hide" approach as opposed to a secure approach. I think some combination of the two will suit my security needs.

Q: how do I prevent that from happening in IIS - I have been browsing around in IIS, but apparently, I've missed somthing.



I am a nobody, and nobody is perfect; therefore, I am perfect.

 

[scroce]

partially answered my own question - looks like virtual directories are the way to go.

I am a nobody, and nobody is perfect; therefore, I am perfect.

 

[scroce]

I just ran across a third party possibility

http://www.winability.com/folderguard/restrict-downloads-ie.htm

I am a nobody, and nobody is perfect; therefore, I am perfect.

 

[scroce]

For anyone else having this question in the future, here is another helpful answer thread from a different site.

http://www.accessmonster.com/Uwe/Fo...t-download-MS-Access-database-from-web-folder

I am a nobody, and nobody is perfect; therefore, I am perfect.