I own an IIS server where I have hosted a simple WordPress website. I have made this website available to the internet over port 80.

Almost everything is working fine, except the permissions that are set on files I upload to WordPress using the CMS itself.

The IUSR, IIS_IUSRS and Network Service users have Full Control over the entire WordPress directory, however, when I upload new files, the permissions aren't inherited.

Basically WordPress generates a thumbnail, which I can access. But when I try to select the actual uploaded image, the image is not recognized. When I go to my directory on the IIS server, I see that the user accounts mentioned above don't have permissions on this new image at all. When I inherit the permissions again, I am able to select the image again.

I've looked all over the internet and tried solutions like changing the owner of the WordPress directory and changing the Anonymous Authentication user account, but unfortunately nothing is working.

Does anybody of you have any suggestions?

  • 1
    You may need to change the permissions on the Temp directory Commented Jul 31, 2017 at 19:32
  • 1
    wordpress.stackexchange.com/questions/14807/… Commented Jul 31, 2017 at 19:52
  • @czerspalace Unfortunately this did not work, but thanks for your comment!
    – Toine-L
    Commented Aug 1, 2017 at 20:23
  • @czerspalace I checked your solution once again, this time it worked. Don't know what I did wrong the first time... Thanks!
    – Toine-L
    Commented Aug 24, 2017 at 16:21
  • @czerspalace That fixed the same problem for me, too. You should add it as an answer so I can upvote it!
    – Rich
    Commented Jul 5, 2019 at 10:14

4 Answers 4


I found that IIS DOES now include INDEX.PHP and that the solution was to modify the location and permissions of the WordPress uploads folder. https://www.urtech.ca/2018/04/solved-500-error-on-downloads-in-wordpress-running-on-iis/

I hope this helps.


I had this exact same problem. It turns out WordPress is using the C:\Windows\Temp directory. When I changed the permissions to this directory for IIS_USRS to have read permission, the issue was resolved.

There may be similar or slightly different reasons as to why you have image upload problems. If so, read this small article. It might have something else for you to try.


  • 1
    The solution provided in the article solved the issue for me. Thank you! Commented Nov 28, 2022 at 13:11
  • @RicardoVigatti glad it helped mate. Appreciate the upvote. 👍
    – dewd
    Commented Nov 28, 2022 at 16:40

IIS does not by default add index.php to the list of accept default documents. IIS will also not allow for directory browsing. This is critical for Wordpress to run correctly. To solve this, locate the web.config file in the root of the hosting space. If it does not exist, create one and add the following commands.

<?xml version="1.0" encoding="UTF-8"?>
  <directoryBrowse enabled="false"/>
    <add value="index.php"/>
    <add value="Default.htm"/>
    <add value="Default.asp"/>
    <add value="index.htm"/>
    <add value="Default.aspx"/>
    <rule name="wordpress" patternSyntax="Wildcard">
      <match url="*"/>
          <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true"/>
          <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true"/>
      <action type="Rewrite" url="index.php"/>
  • Thanks for your response, I tried this and restarted IIS. Unfortunately this did not resolve the error. Images uploaded still have different permissions in the uploads folder.
    – Toine-L
    Commented Aug 1, 2017 at 20:24
  1. Make sure to use the following permissions for the directory of your website.
  • CREATOR OWNER – special permissions.
  • SYSTEM – Full Control.
  • Administrators – Full Control.
  • Users – Full Control.
  • IIS APPPOOL<the name of your application pool> (if any) – full control
  1. Go to your website -> IIS Authentication -> Anonymous Authentication (which should be the only one enabled). Click Edit. Ensure Application pool identity is selected.

  2. Restart the application on IIS.

That is it!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.