IUSR_computerName account - differences 2000 and 2003

From: Eoin Mooney (eoin.mooney_at_nortelnetworks.com)
Date: 11/13/03 

Date: Thu, 13 Nov 2003 01:25:57 -0800

We have an issue trying to run our application [web based]
on the new Win 2003/ADAM setup. We currently use W2K/AD
and have no problems at the moment.

Our main issue is when we try and schedule an event on MS
scheduler through a browser . We cannot actually do this
on Win 2003/ADAM .

We have tried to figure out why and came up with the
following , What I need to know is :

Is this a correct analysis of the cause of the problem we
are having ?

Is there a solution available for us ?

On Win 2000
 
1. IUSR_computername (default User) is created and it's
member of "Guest" only, when we setup IIS on the
Appserver. This user can be changed by "Computer
Management" tool.
2. When we setup Active Directory on the Appserver, it's
member of "Guest" and "Domain Users". From now on, you
can't change this user "Computer Management" tool (You
have to use "Active Directory Users and Computer" tool).
Note that "Domain Users" is set as "primary key" and you
can not remove it from IUSR_computername's properties.
3. The IUSR_computername is set as "anonymous" user for
IIS on Win2000. That means on Win2000 the anonymous users
is in "Domain Users" and it is controlled by Active
Directory.
 
Is that correct? and what do you think about?.
 
On Win2003
 
1. IUSR_computername (default User) is created and it's
member of "Guest" only, when we setup IIS on the
Appserver. This user can be changed by "Computer
Management" tool.
(2. We don't have Active Directory on the Appserver 2003,
so the properties of IUSR_computername are remain
unchanged)
3. The IUSR_computername is set as "anonymous" user for
IIS on Win2003. That means on Win2000 the anonymous users
is in "Guest" only and therfore we cannot perform the
action we used to do on Win 2000/AD setup .

Relevant Pages

  • SBS Setup Error: An error occurred while creating user accounts...
    ... At the end of the SBS Setup, I get the error: ... creating user accounts. ... create a test user to verify that Active Directory is running. ... I'm then prompted to restart the server, but it doesn't think it has finished ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS Setup Error: An error occurred while creating user accounts...
    ... An OU called "Domain Users" existed at the root of the domain. ... At the end of the SBS Setup, I get the error: ... create a test user to verify that Active Directory is running. ... I'm then prompted to restart the server, but it doesn't think it has finished ...
    (microsoft.public.windows.server.sbs)
  • Re: RAS errors - removing Everyone from Pre-Windows 2000
    ... We do not have Radius Setup, is this a requirement or can ... permissions to read the ... >to write to the Active Directory record. ... Expand Computer Configuration, expand Windows ...
    (microsoft.public.win2000.ras_routing)
  • Re: Moved to WDS from RIS, most basic feature missing?
    ... NOrmal way we auto create the PC account is to prestage in Active Directory with the machine's GUID. ... In RIS i would choose Custom Setup on brand new ... Where is the computer name box is WDS? ...
    (microsoft.public.windows.server.setup)
  • Re: Active Directory Setup & Administration
    ... I'm new to active directory. ... I've been working with peer to peer network ... For practice I've setup two computers. ... one with windows xp professinal ...
    (microsoft.public.win2000.active_directory)