RE: Anonymouse access causes Unauthorized Access error

From: Wei-Dong Xu [MSFT] (v-wdxu_at_online.microsoft.com)
Date: 11/25/03 

Date: Tue, 25 Nov 2003 06:14:07 GMT

Hi Barry,

>From my experience, you can check the IIS log and event viewer to see whether there is any related error information regarding this issue. The IIS
log is located at: %windir%\system32\logfiles. You can type "eventvwr"(without quotation) in start->run to start the event viewer. If you find any, it
will be appreciated that you post them in the newsgroup.

I am not sure whether your windows 2003 server is a domain controller. It is not recommended you install IIS in one domain controller for the secure.
If the hackers break the IIS, the attackers will obtain all the domain information very easily. Furthermore, there is one kb article which introduces
more information about IIS in the domain controller . Please go to:
263140 Anonymous and Basic Authentication Fail When You Connect to IIS 5.0 on a
http://support.microsoft.com/?id=263140

It is also appreciated you tell me whether there is some other servers installed in the box, for example Exchange.

Please feel free to let me know if you have any questions.

Does this answer your question? Thank you for using Microsoft NewsGroup!

Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: Anonymouse access causes Unauthorized Access error
    ... There are no other servers othe ... than IIS running on this server. ... > I am not sure whether your windows 2003 server is a domain controller. ... > Microsoft Product Support Services ...
    (microsoft.public.inetserver.iis.security)
  • Re: IISlockdown doesnt allow asp !!!
    ... You IIS server is a DC right? ... > It's bcos i can't access the "Domain Controller Security Policy", ... go to your Domain Controller Security policy. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Remove Content-Location header in IIS 6.0
    ... there are ways to alter this tag in IIS 4.0 ... you have to contact Microsoft product support to get the ... An IIS 5.0 web server is really a Netscape Enterprise server ... ... An IIS 6.0 web server is really an Apache web server ... ...
    (microsoft.public.inetserver.iis.security)
  • Re: Flame Bait! Windows vs: The Unices
    ... IIS, SQL, domain controller, etc. all from MS, you know, the typical ... the "toolbox" basic functionality of UNIX systems ... doing anything useful that quickly on a Windows machine. ...
    (comp.programming)
  • Re: aspnet_wp.exe could not be started
    ... the issue you are dealing with is that domain controllers do not have local accounts and for security, iis, aspnet and sqlserver have been converted to local limited priv accounts in their installation. ... it sounds like you've got sqlserver (its pretty simple because it will setup the account privs). ... Before you start lecturing me on my setup, I am a professional developer and the reason I have IIS running on a domain controller is that I have a small development network with a server and a couple of workstations. ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast