Re: IIS - Access denied by ACL

From: BB (Bernard_at_3exp.com)
Date: 02/24/03 

From: "BB" <Bernard_at_3exp.com>
Date: Mon, 24 Feb 2003 11:37:51 +0800

Have you turn on auditing ????

try verify permission with this kb
http://support.microsoft.com/?id=271071

if no luck get filemon and regmon
from www.sysinternals.com and monitor
any access denied or fail entry.

Rgds.

"ps" <ps_phero schnabela hotmail dod kom> wrote in message
news:OVS9CB02CHA.1900@TK2MSFTNGP10.phx.gbl...
> Turned on basic authentication. Helped me with the browsers, but Flash MX
> still can't log in =(
>
>
> "Karl Levinson [x y] mvp" <levinson_k@despammed.com> wrote in message
> news:O2KQ58q2CHA.2312@TK2MSFTNGP10.phx.gbl...
> > Enable auditing so you can see which account is being denied which
> > permission to which file.
> >
> > http://securityadmin.info/faq.htm#auditing
> >
> > IUSR and IWAM also need permissions not just to the content but to
various
> > files in your windowsroot folder and program files folder, so enable
> > auditing everywhere.
> >
> > The link above also has links to documents containing the "minimum NTFS
> > permissions" required for IIS to work. Search the page above for
> "minimum"
> > or "NTFS."
> >
> >
> > "ps" <ps_phero schnabela hotmail dod kom> wrote in message
> > news:uzQFjPq2CHA.452@TK2MSFTNGP11.phx.gbl...
> > > OK... I'm lost. I think I've tried everything. I hope somebody here
can
> > help
> > > me.
> > >
> > > I'm developing homepages on IIS 5.1 WinXP and need to test how my
sites
> > > behave on different browsers. The problem is: I can only access
> localhost
> > > sites from IE and not netscape/mozilla or Opera. With browser other
than
> > IE
> > > I can only get a dir listing - if I try to access .asp or .php pages I
> get
> > > this:
> > >
> > > You are not authorized to view this page
> > > HTTP 401.3 - Access denied by ACL on resource
> > > Internet Information Services
> > >
> > > I'm not sure where this problem came from since I've been able to view
> > these
> > > files before.
> > >
> > > I've tried adding Everyone, IUSR, IWAN, creator, system, and myselv
> under
> > > Security Settings on wwwroot - but no luck. I've enabled Anonymous
> Access
> > > and tried all combinations under Authentication Methods.
> > >
> > > Am I missing something? I can't find anything on google that I haven't
> > > already tried.
> > >
> > > Please help =)
> > >
> > > Regards
> > >
> > > P. Sommer
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003
> >
> >
>
>

Relevant Pages

  • Re: Detail display for audit policy
    ... manipulating with security such as Scriptlogic's Security Explorer ... are talking about auditing I would suggest using Active Administrator ... If I want to audit the user permission. ... auditing through Group Policy, you can enable it in each server's Local ...
    (microsoft.public.windows.server.security)
  • Re: Permissions and Auditing
    ... I was wondering if I can use auditing to track down the problem. ... You already know there is a permission problem so that is ... File or rather "Object Auditing" requires TWO different settings however; ... Event viewer, Security Logs. ...
    (microsoft.public.windows.server.general)
  • Re: auditing active directory not working properly directory service access
    ... Check the other containers such as OUs, computer, user, domain controllers ... to see if any auditing is configured there also which you would also want to ... > After enabling auditing for permission changes on the root of the domain, ...
    (microsoft.public.windows.server.security)
  • Re: File Open/Close Auditing
    ... then I assume he got permission and I don't care how. ... you can create an audit ACE that triggers ... > when user foo opens the file for read, ... >> folders for auditing. ...
    (microsoft.public.platformsdk.security)
  • Re: Permission denied when using fs.CreateFolder(path)
    ... explicit permission for IUSR to modify the directory in which you want to ... >> You can authenticate your user with Windows authentication, ... >> you just give IUSR permission to create folders if that's what your ...
    (microsoft.public.inetserver.asp.general)