Hi Marco!
I saw that, but you only mentioned do it for the c:
The Windows folder (and Program Files) don't inherit from C, so it's added back in again there. Should we also remove it from those too?
Ah sorry, Yes you should apply it there too to be secure.
Please be careful when doing so however, as each program reacts different when you do it (for example FileZilla will need to have it's user added to the file admin group).
Once the changes are made your best to reboot the server and make sure all services are still properly running.
Using the wayback machine to look at the Websitepanel deployment guide for IIS 7, it recommended forcing .NET to medium trust. Indeed I remember having to do this with the old 2000 Helm servers.
Is this no longer necessary with 2012/IIS 8?
Setting to medium trust is fine to set.
However we have seen it causing some issues with certain apps/ sites (so it's not really a global step but more a step you need to consider will fit your clients or not).
Security wise it doesn't impact too much aslong as segregation is properly done.
