1. From the task bar select Start, select Programs, select Administrative Tools select User Manager for Domains.
2. Select User then Select New User
3. Enter the username, description, and password, then click Add, then Close.
4. Select Policies, Select User Rights.
5. From the pull-down Right menu select Logon Locally, click Add, then click Show Users now select the user you just added.
6. Now click Add, then OK, then click OK one more time.

1. Set the correct permissions for the shopping cart directory.

a) From the task bar select Start, select Programs, select Windows NT Explorer.
b) Browse to the shopping cart directory or create it (e.g. c:\InetPub\scripts\sb)
c) Select (highlight) the directory name then right-click your mouse
d) Select the Properties option
e) Select the Security Tab then click the permissions button.
f) Press the add button, click the show users button.
g) Select the user (store ID) you created in section A above, click the down arrow on the Type of Access box, select Full Control, then click OK.
h) Also give the customer (anonymous logon) at a minimum read access (if it does not already have it.)
i) Press OK twice more to return to Windows NT Explorer.

2. Set the correct permissions for the output directory by repeating step 1 above.

3. Repeat step1 above with one variation to correctly set up the permissions on data directory. Because orders are stored in the data directory the anonymous user needs to have at a minimum the Change permission on the directory (step h). Since the data directory is not aliased by the Web server and is not located under the document root (InetPub) anonymous users cannot browse to the directory and compromise security.

1) From the task bar select Start, select Programs, select Microsoft Internet Server, select Internet Service Manager.
2) Select the Default Web Site for your system.
3) Right Click on the stores' directory (e.g. /NtStore)
4) Select New and then Virtual Directory
5) Enter URL Alias (e.g. sb)
6) Browse to the shopping cart directory then click OK.
7) In the Access box ensure that Read and Execute are checked.
8) Then click OK, then click OK again.

1. Configure IIS to recognize the back office directory.

a) From the task bar select Start, select Programs, select Microsoft Internet Service Manager, select Internet Service Manager.
b) Select the Website for this store.
c) Select the html directory for this store and right click on it.
d) Select Add then Virtual Directory.
e) Enter the URL alias (e.g. bo) and click next.
f) Enter the exact path for the Back Office directory (e.g. c:\inetpub\scripts\bo) and click next.
g) In the Access box ensure that Read, Execute and Script are checked.
h) Then click finish, then click OK again.

2. The directory must be password protected for Web access.

a) From the task bar select Start, select Programs, select MicroSoft Internet Information Server, and then Internet Service Manager.
b) Select the Website for this store.
c) Select the directory alias name then right-click your mouse.
d) Select properties then select the Directory Security tab.
e) Select Edit for the Anonymous Access and Authentication Control.
f) Select the Basic Authentication and De-select the Allow Anonymous Access and also NT Challenge and Response.
g) Press OK twice more to return to Windows NT Explorer.

1. From the task bar select Start, select Programs, select Microsoft Internet Server, select Internet Service Manager.
2. Right click on the stores Website, enable logging and make sure that NCSA format is selected.
3. Press OK.