Re: Anonymous works 1 Day ??

From: David Wang [MS] (someone@online.microsoft.com)
Date: 09/28/02 

From: "David Wang [MS]" <someone@online.microsoft.com>
Date: Sat, 28 Sep 2002 02:12:04 -0700

Minor detail with running adsutil. It is a VBScript (extension .VBS) and it
needs to be run by CSCRIPT. WScript is the default script execution engine
on Windows Server, so you need to run:

If you run CSCRIPT //h:CSCRIPT that will set CSCRIPT as the default script
engine. In that case, what Thomas gives will work.

Otherwise, you must run:
CSCRIPT %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs <command> <param1>... 

--
//David
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Thomas Deml [MS]" <thomad@online.microsoft.com> wrote in message
news:e9J0mXmZCHA.1676@tkmsftngp08...
Stephane,
is the machine member of a domain and does the domain apply group policy? It
seems that a group policy takes away the "logon locally" right from the IUSR
account. This right is needed for IIS to logon the anonymous user though.
Either you ask your domain admin to exclude the IIS machine from the group
policy or you change the way IIS logs on the anonymous user. There is no UI
to change the logon method. You would have to do it via script, e.g.
c:\inetpub\adminscripts\adsutil set w3svc/logonmethod 3
This changes the logonmethod to "NETWORK_CLEARTEXT" which is default in IIS
6.0.
If it doesn't work you can reset this by entering the following command:
c:\inetpub\adminscripts\adsutil delete w3svc/logonmethod
Hope this helps.
Thomas Deml
Lead Program Manager
Internet Information Services
Microsoft Corp.
"Stephane Leleu" <sleleu@euroview.com> wrote in message
news:a9b301c265f8$5a548ae0$35ef2ecf@TKMSFTNGXA11...
> Hi there...
>
> I have a Windows 2000 adv. server with SP3 running IIS
> (domain member).
> Anonymous access is done with the integrated IUSR_...
> local user.
> Anonymous access can be done for a few hours then I get
> a "Access Denied" error.
> When restarting IIS service, it works for a few another
> hours.
> Event log says W3SVC Warning : "the user doesn't have the
> required logon permission to log on this computer..."
>
> What's wrong ??

Relevant Pages

  • Re: CGI Security on IIS 6.0
    ... Was it written for an IIS ... >The script takes a username and current password and new ... anonymous user, attempting to perform an LDAP query that is restricted ... account, nor are you logging in as the anonymous user when you run the ...
    (microsoft.public.inetserver.iis.security)
  • RE: Scripting the creation of IIS Web Sites
    ... When you create a user via script, you must go back and assign it a password. ... > do when creating a new web site including creating the new anonymous user. ... > Unfortunately IIS seems to have an issue with this user. ... > I manually reset the password for Anonymous user access in the MMC. ...
    (microsoft.public.windows.server.general)
  • Re: Secured IIS Project - IIS 4.0 Secure Script
    ... Secured IIS Project - IIS 4.0 Secure Script ... Machines which were upgraded from IIS 2.0 (original NT installation), ... Remove FTP Service ...
    (NT-Bugtraq)
  • Re: INETINFO and ASP Trouble
    ... seeing many IIS and ASP errors in the event log, ... > Event Type: Error ... > Event Source: Service Control Manager ... IIS log failed to write entry, Script timed out. ...
    (microsoft.public.inetserver.iis)
  • Re: Webservice to an Out of process server
    ... I've create a COM server in VFP which I try to access from a Webservice ... If you want to run executables on IIS from a script (i.e. an ASP, ASP.Net, ... well as Web Service Extension for the appropriate Script Engine. ...
    (microsoft.public.inetserver.iis.security)