Re: IISlockdown doesn't allow asp !!!

From: BB (Bernard_at_3exp.com)
Date: 12/12/02 

From: "BB" <Bernard_at_3exp.com>
Date: Thu, 12 Dec 2002 11:56:22 +0800

You IIS server is a DC right ?
so if you getting 'The path to the domain controler wasn't found'
something must be wrong with your machine.

and it's not recommend to run IIS in a DC. If this is a test
machine and you don't really need a DC, I suggest you run
dcpromo again to demote it. DC tighten security on guest
and anonymous user access.

you might try windows2000 group to fix your dc error.

If your machine is a DC, the only I know is to use the policy mmc
to assign the user rights. I'm not aware of any other methods.

when you browse the site, and you got a login problem is cause
by permission and authenication mode you set in IIS. if you ensure
anonymous is set already, next go to the (web site) physical folders
and ensure iusr has at least 'Read' permission on the files.

Rgds.

"Rafael Reyes" <hreyesm@softhome.net> wrote in message
news:eO3s0W8mCHA.2172@TK2MSFTNGP12...
> Thx, this should work fine i guess !
>
> But, i did discover that my Domain Controler have a problem (or many
> problems :-( )
> It's bcos i can't access the "Domain Controller Security Policy", i got
the
> erros: "The path to the domain controler wasn't found" and "The network
path
> is not available" or something like that :-(.
>
> Don't know exactly, but i'm thinking that this DC problem is caussing the
> ASP prob. but i don't know how to fix this DC problem !
>
> ASP work, more and least, when i set "Applicatioin Securiity" to Low, but
> still asking a username and password. It work without this information
> (username and pass) from the server, but not from any other terminal, so i
> need give a "local access" account information, in order to get the asp
> running.
>
> Are there anotther way to set "Log on localy" and "Access this computer
from
> the network"?
>
> How i can fix the domain controller error?
>
> I supposed that IUSR and IWAM users already had this rights, bcos i don't
> have problems with IUSR i think !!!, but ... i don't know right now!!!
>
> Rgds,
>
> RR
>
>
> "BB" <Bernard_at_3exp.com> escribi?en el mensaje
> news:OkeUwtzmCHA.2352@TK2MSFTNGP11...
> > Ok, go to your Domain Controller Security policy.
> > 'local policies' - 'user rights assingment'
> >
> > ensure, iwam_ and iusr_ user granted the right.
> > 'access this computer from the network'
> > 'log on locally'
> >
> > then open windows explorer, go to your web root.
> > default is 'c:\inetpub\wwwroot\' check if iusr has
> > at least read permission on the files.
> >
> > to allow anonymous access, go back to your IIS MMC
> > ensure ' anonymous access' is checked at 'Directory
> > security' tab of your web site properties ***.
> >
> > and is your asp working now ?
> >
> > Rgds.
> >
> >
> > "Rafael Reyes" <hreyesm@softhome.net> wrote in message
> > news:eoJMMrumCHA.2076@TK2MSFTNGP08...
> > > PD: I don't need write the username and password from the own IIS
> server,
> > > but from any terminal.
> > >
> > > :o( that's bad !
> > >
> > > RR
> > >
> > > "BB" <Bernard_at_3exp.com> escribi?en el mensaje
> > > news:#gK6S7amCHA.2224@tkmsftngp02...
> > > > Focus on the 500 error first, turn off IE friendly
> > > > error msg and post the exact error msg.
> > > > or try this
> > > >
> > > > HOW TO: Troubleshoot ASP in IIS 5.0
> > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;309051
> > > > HOW TO: Troubleshoot an "HTTP 500 - Internal Server Error" Error
> Message
> > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;311766
> > > >
> > > > If urlscan really 'disable' asp, you should get 404 error rather
than
> > > > 500 error. Check anything special in event log and urlscan log too.
> > > >
> > > > Rgds.
> > > >
> > > >
> > > >
> > > > "Rafael Reyes" <hreyesm@softhome.net> wrote in message
> > > > news:#9zY$YKmCHA.1824@tkmsftngp04...
> > > > > I made some changes to URLScan... but the 500 error continue ...
> > > > > btw, i uninstall and reinstall iislockdown again ..... and set my
> > server
> > > > > like a Web Dynamic Server ASP enabled .... but the error still
there
> > > !...
> > > > > php work fine with my IIS 5 but ASP doesn't.
> > > > >
> > > > > Into the URLSvan log there are not any blocked about asp pages ...
i
> > can
> > > > see
> > > > > the web error 500 on my IIS log: "Internal server error".
> > > > >
> > > > > I did read the info that you sent me. But i can use Auditing,
> becouse
> > i
> > > > have
> > > > > a problems with my domain police and therefor i can start any
> Auditing
> > > > > proccess .... It wiil be the cause of the ASP error ???, I don't
> know
> > > so,
> > > > > but i don't know a lot :-).
> > > > >
> > > > > what i can do to check my asp environment or setting on IIS ?
> > > > >
> > > > > how i can know if all the asp files and rights are fine ?
> > > > >
> > > > > Exist some like a aspinstall.exe?, or i need reinstall the whole
> IIS?
> > > > >
> > > > > I stay running IIS becouse i like asp technology, but now i'm down
!
> > > > >
> > > > > Another help will be appreciate!!!
> > > > >
> > > > > Thx.
> > > > >
> > > > > Rafael Reyes.
> > > > >
> > > > > "Karl Levinson [x y] mvp" <jamescagney90210@excite.com> escribi?en
> el
> > > > > mensaje news:uA4cGjCmCHA.1740@tkmsftngp07...
> > > > > >
> > > > > > "Rafael Reyes" <hreyesm@softhome.net> wrote in message
> > > > > > news:Oo7X23#lCHA.488@tkmsftngp02...
> > > > > > > Hi !
> > > > > > >
> > > > > > > I did install IISLockdown with URLScan .... in order to avoid
a
> > lot
> > > of
> > > > > > crack
> > > > > > > attemps that i was receiving las month..... when i did install
> it
> > i
> > > > set
> > > > > it
> > > > > > > to use ASP in my web site and i did choice the best setting
> > possible
> > > > to
> > > > > > > allow that ... but now my site doesn't allow asp pages ... and
> it
> > > show
> > > > > > HTTP
> > > > > > > 500 - Internal server error.
> > > > > > >
> > > > > > > How i can work with ASP in my IIS site with IISlockdown ?
> > > > > > >
> > > > > > > PS: I don't have saw anything blocked by URLscan ... but i got
> the
> > > 500
> > > > > > error
> > > > > > > for each asp page that i try to get !
> > > > > >
> > > > > > So you're saying you've already checked the urlscan.log file and
> > > aren't
> > > > > > seeing anything being blocked? If not, do so [and then edit the
> > > > > urlscan.ini
> > > > > > file and restart IIS if something is being blocked per the log].
> > > > > >
> > > > > > If you've already looked at the urlscan.log file, you might try
> > > enabling
> > > > > > auditing to see what is happening.
> > > > > >
> > > > > > More info:
> > > > > >
> > > > > > http://securityadmin.info/faq.htm#urlscan
> > > > > > http://securityadmin.info/faq.htm#auditing
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>