phpBB :: Knowledge base - Viewing article How to secure access to Admin panel Windows/ISS

Here is how you can secure the access to the Admin panel when phpBB runs on a Microsoft Windows platform

1. Open "Internet Information Services". Scroll down to your website, and expand it so that you se the folders below phpBB2

2. Right click "admin" folder and select "Properties", select then "Directory Security"
(Here you can also restrict to only certain IP addresses or internet domain name)

3. Select "Edit" and then remove the check mark for "Anononymous access"

4. Click OK and close all open windows.

5. To see which user that can access this folder, open Explorer and select "Properties" "Security"

6. To add new user "right click" "My Computer" and select manage

Here is an example of what happens when you try to access Admin panel

NB! If "Everyone" is selected, all computer accounts can access Admin panel in phpBB. It is very important to have passwords on all accounts, including "Administrator"

If you want a specific user for your phpBB Admin panel, create that user in "Computer Management" (remember password).
Remove "Everyone" form folder access, and add "The new user"

This works as a charm on my computer