When administering Index Server over the Web, you should make sure to tightly control administrative access. All administrative operations Index Server are controlled by the access control list (ACL) on the following registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ContentIndex
If you need to put additional controls on administrative operations, you can put ACLs on the .ida, .idq, and .htx files through which you administer your site. If you administer your site only locally rather than from a remote computer, you can put the administration forms on a local disk, which can be accessed through the following address:
file: URL references
To administer your site locally, you must make the scripts available in a virtual directory with Execute or Script permission on your Web server.
For information about security in the Scripts directory, see Internet Data Query Files.