Working with web.config Files in Windows SharePoint Services

In a Microsoft® Windows® SharePoint™ Services deployment, web.config files are contained in the following folders within the file system:

  • Local_Drive:\Inetpub\wwwroot — The web.config file of the top-level content root folder that defines configuration settings for the virtual server of the default Web site in the Windows SharePoint Services deployment. In addition, the content root folder includes a \wpresources folder that contains a web.config file used in Web Part resources.
  • Local_Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\wpresources — A web.config file that is used in Web Part resources for the Global Assembly Cache (GAC).
  • Local_Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\CONFIG — The web.config file and other .config files that together define configuration settings for extending other virtual servers.
  • Local_Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\ISAPI — The web.config file that defines configuration settings for the /_vti_bin virtual directory.
  • Local_Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\TEMPLATE\LAYOUTS — The web.config file that defines configuration settings for the /_layouts virtual directory.
  • Local_Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\TEMPLATE\ADMIN\Locale_ID — The web.config file that defines configuration settings for pages used in SharePoint Central Administration.

When a virtual server is extended with Windows SharePoint Services, a top-level web.config file is placed within the content root folder of the extended virtual server, which defines configuration settings for the server such as HTTP handling for Web Parts. Another web.config file used for Web Part resources is placed in a \wpresources folder within the same content root folder.

Important  The web.config files in the \wpresources folders should not be modified. The settings of these files disallow pages or items that can be compiled. If these settings are changed, the security state for the compiled code will be very different from the security state for code that runs from the Local_Drive:\Inetpub\wwwroot directory.

Typical customizations involving web.config files include such contexts as the following:

Warning  Changes that you make to web.config may be overwritten when you install updates or service packs for Windows SharePoint Services, or when you upgrade an installation to the next product version.