I've an issue with Drupal on an IIS 7 web server.
For some reason I get this error message in the status report. The default folder has only "View" permissions, while the children folder "files" and all subfolders have both write and read: http://d.pr/WZ0F
Configuration file Not protected The directory sites/default is not protected from modifications and poses a security risk. You must change the directory's permissions to be non-writable. The file sites/default/settings.php is not protected from modifications and poses a security risk. You must change the file's permissions to be non-writable.