Acquia Drupal's web.config file

This Is oficial web.config
http://drupal.org/node/557898

Just wanted to say I don't need a reply anymore. Client who was on IIS has now switched to Linux.

UPDATE!!!

Just realized (after inspecting the correct .htaccess file) that this web.config sample is FAULTY in some parts...
"Protect files and directories from prying eyes" rule isn't correct:
1. there's a missing backslash at the beginning - we have to escape the dot (".") character!! (These dot characters even disappear here on this forum of groups.drupal.org after posting!!! So we have to double these backslashes in our comment like \\!)
2. There is also a missing asterisk before "sql".
3. tpl(.php) isn't correct either, we have to escape dot character again - so the correct one is tpl(\.php)
4. code-style.pl is correctly code-style\.pl
5. Entries. has to be Entries.*
6. postinst.1 should MAYBE be postinst\.1 (what's this for??? That's the only one I'm not sure about...)

So the working rule is the following:

    <rule name="Protect files and directories from prying eyes" stopProcessing="true">
     <match url="\\.(engine|inc|info|install|module|profile|test|po|sh|.*sql|postinst\\.1|theme|tpl(\\.php)?|xtmpl|svn-base)$|^(code-style\\.pl|Entries.*|Repository|Root|Tag|Template|all-wcprops|entries|format)$" />
     <action type="CustomResponse" statusCode="403" subStatusCode="0" statusReason="Forbidden" statusDescription="Access is forbidden." />
    </rule>

Here is my web.config for Drupal 6.

Previous comment (now outdated, except 3rd point):

Hi!

I can confirm @paulvantuyl's answer, this web.config setting can sometimes cause undesirable and undue 403 HTTP status codes.
We're using IIS 7.5 + URL Rewrite Module 2. I'm writing down my experiences below:

1.) The most confusing problem I saw related to this part of the web.config file is that it didn't let me flush the Drupal cache via Administration menu , because this rule matches "theme" string, and the link to flushing theme registry via Administration menu is something like this:
/admin_menu/flush-cache/theme?destination=user%2F1&token=cc95fef7a2fec234b3111920e5eb61d0
This address is blocked via the mentioned rule.
I wrote the details here too.

2.) This way I can't even reach e.g. Profile or Content Profile admin pages... Just to mention some addresses which give 403 error: /admin/user/profile, /admin/help/profile (help), /admin/content/node-type/profile/profile, /admin/advanced_help/content_profile (help).
These are unavailable because there's a match for the "profile" part. I get a 403 error... again. So cutting out the "profile" part from this rule solves the problem.

== related to "Force simple error message for requests for non-existent favicon.ico"
3.) Forcing 404 for the favicon.ico file causes that it's blocked everywhere!
For example, I have my own favicon.ico set in /sites/default/files/favicon.ico (but I do have the same one in root too, WHY NOT?! - in the previous Apache log I saw many 404 errors related to missing favicon.ico files in the root...), but Administration menu can't display it because of the rule...
I think forcing 404 for favicon.ico files in root directory doesn't make sense at all. If it really doesn't exist in the root (this is the fact with a default Drupal installation!), IIS (and Apache) will generate a 404 status code ANYWAY...
Our own favicon.ico file can be set (on e.g. /admin/build/themes/settings/global), and it's placed into /sites/default/files/favicon.ico by default... but why would it be a good idea to force an error message when it's needless (and generated by default)?

Maybe later I will discover more problems with it, these are the ones I had trouble with.

Please let me know if you have any opinions about the mentioned problems.

Site is working now. but links are not working. when click on any link then display blank page.

Hello !

I'm not sure it will work on a shared box because the limitations can be hard-coded by your hoster, but you usually extend the file upload max size in the httpruntime section :

in system.web section, add
<httpRuntime maxRequestLength="4096" />
...

This defines a 4Meg limitation.

Pierre

Hi, what version of iis are you using?

Hi alexpilotti , Im using 7.5

It works for me. What is your e-Mail adress and I send it to you directly.

Hi MicKraft

Brian,
Try this,

<rule name="Rewrite FOIA_FILES to DOCUMENT_LIBRARY" stopProcessing="true">
<match url="^foia_files/([_0-9a-z-]+)" />
<action type="Redirect" url="/sites/default/files/document-library-files/2013/{R:1}" />
</rule>

I forgot the .pdf in the match url.
try make it one of your first rules in your web.config file. It is working on my machine.

<rule name="Rewrite FOIA_FILES to DOCUMENT_LIBRARY" stopProcessing="true">
<match url="^foia_files/([_0-9a-z-]+.pdf)" />
<action type="Redirect" url="/sites/default/files/document-library-files/2013/{R:1}" />
</rule>