Re: The server was unable to logon the Windows NT account ...

From: Matt Cahill (anonymous@devdex.com)
Date: 12/10/02 

From:     Matt Cahill <anonymous@devdex.com>
Date: Mon, 09 Dec 2002 22:08:31 -0800

Hi there,

Thanks for your reply.

>IMHO you answered your own question. The ID and password >must be the
same on both servers. Why aren't they, and can >you change that?

I was stating what I had done previously to get this working - I can
change the password back but I want to use a user account with
restricted access.

>The user name isn't unknown, so the other option is "bad >password."

I have set up identical user accounts/passwords on both servers but
still cannot get access. Have granted access to this user on both the
share and NTFS.

>On the other hand, you probably shouldn't be using the >Administrator
account to do this, because in order for >that to work, either you would
have to let IIS impersonate >the Administrator account [which is bad for
security], or
>your web site would only work while you are logged in as >Administrator
[sothat if the machine was rebooted due to a >blue screen or a power
outage, it would boot up to a login >screen and your web site would be
broken until you drove >to the server and logged into Windows.

I know this - I am just stating that the only way I can get his to work
is by using the administrator account - but as I have said previously I
want to get it working using a restricted user account - which is why it
doesnt make sense! i.e. why is the identical administrator accounts on
both servers giving me access but not an identical user account?

>A more usual way to do this is to either use a domain >account that has
permissions to the target computer as the >anonymous user in the IIS MMC

The webserver is an NT machine so it is not a part of a win2k domain -
or can it?

>set up an identical IUSR account on both computers with >identical
passwords, put the accounts in the local Guests >group instead of the
Users group, and use the IIS MMC to >disable allowing IIS to manage the
anonymous user password

How would the IUSR account be identical when it uses the _machinename
whom it impersonates (Im probably missing something though)? Have you
got a link to KB or anything that I could follow?

thanks again,

Matt

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Relevant Pages