In IIS manager properties for a web site, "properties", "Home Directory"
tab.
Click "Configuration" button, "options" tab, "Enable parent paths" checkbox.
Can also be set at virtual directory level - "properties", "Virtual
Directory" tab, then "configuration", options tab.
> Hi,
>
> The following web server security checklist:
http://msdn.microsoft.com/library/en-us/dnnetsec/html/CL_SecWebs.asp?frame=true&_r=1
> mentions "Parent paths" setting is disabled.
>
> Where can i disable "Parent paths"?
>
> Thanks,
> Ali