Virtual Directory Security :: Final Question?

From: Carl Revell (carl.revell_at_aylnews.no.spam.com)
Date: 08/08/03 

Date: Fri, 8 Aug 2003 12:01:37 +0100

In this article:-

Red Stop Sign Appears in MMC on UNC-Mapped Content Directory
http://support.microsoft.com/?id=269009

it states:-

CAUSE
When you map content to a UNC, Internet Information Server (IIS) requires
connect as credentials that are used to impersonate all users that connect
to the UNC resource from the Web or FTP site. Although the connect as
credentials are used to establish a connection to the UNC path, IIS uses the
credentials of the logged on user to enumerate, or list, the files in a
given folder. When you reference resources that are not located on the IIS
server, permissions problems can occur because the security resources (that
is, groups and accounts) on the IIS server may not have a security context
on the remote (UNC) server.

In what context is "...credentials of the logged on user to enumerate..."

On an IIS Server, I created a Virtual Directory to my local machine (both on
same domain) using a Connect As... account to which I gave permissions to
the share and directory on my PC. A simple script on my PC is then
executable from the Web server using either anonymous or NTLM authentication
and yet I still have a red stop sign in the IIS snap-in under MMC when
viewed on my local machine when logged-in as myself. If I am able, logged-in
as myself, so execute the ASP file in this directory (C:\Temp) and can
myself, using Windows Explorer, browse this directory - what user is being
picked up to cause the red stop sign to appear in MMC?

Relevant Pages

  • RE: Error while running a virtual site by using a mapped drive
    ... IIS6/win2003 std server. ... ** the virtual directory is not existing or accessible, for example, you ... ** the IIS process doesn't have sufficient permission to access the ... is not correctly configured for the virtual directory's UNC share. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: UNC Share causing Internal Server Error 500
    ... domain that the web server is not a member of. ... I found that ASP.NET requires that account to have permissions on the ... The UNC path is on DFS. ... IIS need to logon the 'Connect As' account and then use its credential to ...
    (microsoft.public.inetserver.iis.security)
  • Re: Access Denied trying to do quick editing
    ... I disabled anti-virus and it works. ... I tried UNC filename, ... Server has the ASPX files on a local drive ... IIS is configured to map URL to the local ASPX files via a local ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Access Denied trying to do quick editing
    ... I disabled anti-virus and it works. ... I tried UNC filename, ... Server has the ASPX files on a local drive ... IIS is configured to map URL to the local ASPX files via a local ...
    (microsoft.public.inetserver.iis)
  • RE: Seriuos Problem with Component services and MDTC
    ... with PortQry, I discovered that Skype was listening to port 443. ... The server failed to load application '/LM/W3SVC'. ... So what is missing now to make IIS works ... now it is my IIS MMC is in error state (a red sign indicating server ...
    (microsoft.public.inetserver.iis)