Last week I blogged about setting up WebDav on IIS 7.0+, so that you can take advantage of qRules' useful SaveToSharePoint command even if you don't have SharePoint.

This week, I would like to touch very briefly on the matter of security and provide some quick pointers on using WebDav on IIS 6.0, if that is what your web server is running.

First, security.

As with installing any new service on a server, there are risks to keep in mind when setting up WebDav.  WebDav, by its nature, is designed to make it easier to read and write files from and to your web server, so you naturally want to make sure only the right people are doing the right things.  Once you have gone through the simple setup steps to get SaveToSharePoint to work, it's important to tighten down security to the tightest restrictions that will work for you.

The following web page deals with security on WebDav.  It is geared towards IIS 6.0, but the same concepts should apply to other versions as well.

http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/4beddb35-0cba-424c-8b9b-a5832ad8e208.mspx?mfr=true

Now, about using WebDav on IIS 6.0.

My previous post went into a moderate amount of detail for the setup steps, because I was unable to locate a thorough tutorial for setting up WebDav on IIS 7.0 and above.  Luckily, one has already been written for IIS 6.0:

http://www.windowsnetworking.com/articles_tutorials/WebDAV-IIS.html

Once you have installed WebDav on your server, create a virtual directory for your files, similarly to the way I described in my earlier blog post.   In the Virtual Directory tab of the virtual folder's properties, just enable Read, Write, and (if desired) Directory browsing.  Click ok to save the changes, and you should be all set to test out the feature.