Rights Problem with IWAM and IUSR Accounts

From: Chris Scipioni (christopher.scipioni@usa.xerox.com)
Date: 08/22/02 

From: christopher.scipioni@usa.xerox.com (Chris Scipioni)
Date: 22 Aug 2002 13:01:07 -0700

I am running IIS 5 on a Windows 2000 server and I have a rights
problem with the IWAM_server and IUSR_server accounts. The initial
problem was that I could not load any ASP pages, .htm pages loaded
fine. I came across http://www.iisfaq.com/default.asp?View=A463&P=170
which I followed through step by step.

I switched the application protection from high/middle to low and was
able to load ASP pages ok, but then got VBScript runtime error
(0x800A01AD) when running the web application. The ASP page was
trying to do a Server.CreateObject("ADODB.Recordset"). I found
another link which stated that error is most likely due to permissions
problems with the IWAM user also. Bottom line is that I have gone
through many error messages and all solutions/fixes have pointed to a
problem with permissions on IWAM/IUSR.

I 'fixed' the problem temporarily by adding the IWAM_server and
IUSR_server users to the Administrators group. My question is
this...How can I set the permissions for the IWAM and IUSR accounts
correctly, once and for all, so that I can remove the Administrators
group access?

Thanks ahead of time for any info!

Relevant Pages

  • Re: File Sharing (again - sorry, Pd)
    ... InTerminal, type umask. ... Back in the good old days, Mac OS X user accounts ... The reason that the file permissions are "resetting" each time the ... that folder inherit the ACLs from the folder. ...
    (uk.comp.sys.mac)
  • Re: Security Group Keeps getting removed???
    ... ACL on all security principals (users, groups, and machine accounts) present ... Delegated permissions are not available and inheritance is automatically ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating AD Rights (Enable/Disable Accounts)
    ... I will definitely pass it on to my Customer ... user accounts in AD to non-admin staff so that they will be able to ... permissions as Domain User rights will work just fine. ... The UMRA ...
    (microsoft.public.windows.server.scripting)
  • Re: Delegation - Password Reset - Access Denied
    ... If you go to properties of an AD object, select the security tab and click ... on advanced you should be on the permissions tab. ... WARNING - Any implicit permissions defined will be lost and reset back to ... Accounts in the OU and found that the BldgAdmins group was not listed. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win2k - Account Operator not working properly
    ... The tool is a command line tool from Microsoft to enumerate the permissions on an object. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Helpdesk CAN create new accounts/modify/delete/reset passwords for NEW accounts in OUs beneath the top-level OU. ...
    (microsoft.public.windows.server.active_directory)