Re: A question about IUSR_<MachineName>

From: Chris Rolon (chris.rolon_at_removethis.neudesic.com)
Date: 01/30/05


Date: Sun, 30 Jan 2005 07:04:46 -0800

The IUSR account is automatically setup by IIS for anonymous impersonation.

This might be a dumb question but...you have setup the account that you want
to use for anonymous access. Have you changed the account in IIS for
anonymous access? Is the password correct?

Have you run the IIS LockDown tool? If so, make certain that your account is
part of the Web Anonymous Users group.

Chris Rolon

"Erik Cruz" <erikacf.spammers.out@antares.com.br> wrote in message
news:eImRYAtBFHA.3120@TK2MSFTNGP12.phx.gbl...
> Hi.
>
> I am following some Microsoft guidelines to build a more secure web
server,
> in order to run an asp.net application. I created a custom account for
> asp.net and disabled the built-in IUSR_MachineName. The problem is that
when
> I run my application I receive an error: Service Unavailable. As soon as I
> enabled the IUSR_MachineName account, my application works. My application
> receuves anonymous connections from the Internet.
>
> What exactly is the role the IUSR account plays in IIS? When can I disable
> this account?
>
> Thanks,
> Erik Cruz
>
>



Relevant Pages

  • Re: lan file access with perl cgi scripts under iis 5.0
    ... this will probably involve adding a local IUSR account to the remote ... and setting IIS to not control the password for the anonymous iusr ... the IUSR account and not the IWAM account that is being denied access. ...
    (microsoft.public.inetserver.iis.security)
  • RE: SOME Users cannot access OWA others do, error HTTP 500
    ... I understand that some account access OWA ... IIS 6.0 compression corruption causes access violations ... compressed copy of the affected files on the SBS server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Accidently deleted IUSR account on 2003 server.
    ... The registry and the metabase is not the same thing. ... Kristofer Gafvert - IIS MVP ... >> Just creating an account with the same name is insufficient for your ... >> Our service manager accidently deleted the active IUSR account on our ...
    (microsoft.public.inetserver.iis)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 ASP: Which Process Identity Is It Using? App Pool or Anon?
    ... But isn't the COM object running under the ... The COM object can be running under the impersonated account, ... example, even if IIS launched the COM object with the impersonated user, the ... It will now be using "TestService" identity. ...
    (microsoft.public.inetserver.iis)