Re: permission denied after XP upgrade

From: wendy (wendy_blann_at_yahoo.co.uk)
Date: 08/20/03 

Date: Wed, 20 Aug 2003 10:53:30 -0700

It appears to be problems with IUSR_ - not sure whether
the XP upgrade wiped or reset these or whether XP is just
more fussy!

Thanks

>-----Original Message-----
>Try enabling auditing to see what account is being denied
access. This also
>can improve the security of your web server:
>
>http://securityadmin.info/faq.htm#auditing
>
>Correct me if I'm wrong, but I"m not sure IUSR is in the
Everyone group.
>That could be a problem.
>
>Or, is there any chance that the IWAM account is being
used to get that file
>and there's a problem with that account, such as the IWAM
password within
>windows is not the same as the IWAM password cached in
the IIS Metabase? If
>so, see here:
>http://securityadmin.info/faq.htm#iwam
>
>
>"wendy" <wendy_blann@yahoo.co.uk> wrote in message
>news:0bd701c36718$1ee31360$a401280a@phx.gbl...
>> I have just upgraded from W2K Pro to XP Pro.
>>
>> I use IIS as a web server locally for testing out web
>> pages.
>>
>> All my ASP pages have #include virtual statements in and
>> all were working fine under W2K.
>>
>> The pages are tested using in Internet Explorer via URL
>> http://localhost/sitename/pageref.asp
>>
>> All test pages are located in folders under
>> c:\inetpub\wwwroot with different files for each
website.
>> There is a common folder with common scripts in also
>> located under inetpub\wwwroot which is where the
#include
>> points.
>>
>> I am now getting permission denied errors when the page
>> hits the #include line. The target of the include has
>> permissions that allow everyone read and write access.
>>
>> What has happened here and what do I need to do to fix
it?
>>
>> Example:
>> Page: http://localhost/test1/index.asp has statement:
>>
>> <!-- #include virtual="/CommonScripts/stats.asp" -->
>>
>> when run in IE (6.0) I now get permission denied on this
>> line
>>
>> Microsoft VBScript runtime (0x800A0046)
>> Permission denied
>> /CommonScripts/stats.asp, line 19
>>
>
>
>.
>

Relevant Pages

  • Re: Securing IIS
    ... Those IUSR_ and IWAM_ were used to indicate the ... accounts used by IIS. ... > I think you are going to have to explain what are IUSR_ ... this is usually due to the IUSR_ account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: FSO to non domain server UNC?
    ... as long as there is an IUSR or IWAM account in both domains [or ... There should definitely be auditing events. ...
    (microsoft.public.inetserver.iis.security)
  • Re: File System Object Lockdown...possible?
    ... When I simply add the IUSR account to the folder and DENY write acess, ... > global.asa and IWAM have very little to do with the situation. ...
    (microsoft.public.inetserver.iis.security)
  • Re: FileSystemObject and networked drives
    ... say, the IUSR_account. ... webserver to be a low-privelage domain account. ... : my web server. ... The directory has full permissions for the IUSR account. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Anonymous Access...
    ... poweruser group as account to login for anonymous access. ... By default, IUSR ... windows integrated logon, user is interactively logon to the network on his ... > when logging on to the web server. ...
    (microsoft.public.inetserver.iis.security)
Loading