Re: "Logon Locally" right needed?
From: Tom Kaminski [MVP] ((A_at_T))
Date: 01/16/04
- Next message: Tom Kaminski [MVP]: "Re: How can I restrict access to a folder on my IIS website?"
- Previous message: Tom Kaminski [MVP]: "Re: Administration Question"
- In reply to: Tim: ""Logon Locally" right needed?"
- Next in thread: Rob Greene: "RE: "Logon Locally" right needed?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 16 Jan 2004 08:24:17 -0500
"Tim" <anonymous@discussions.microsoft.com> wrote in message
news:074601c3dc1b$3dcbcce0$a601280a@phx.gbl...
> Hi
>
> We are seeing this weird problem on a W2K server with IIS
> installed. The server has 2 partitions, being the C:
> (local) and D: (located on a SAN). For IIS, we use the
> integrated Windows authentication.
>
> When we create a virtual directory on the C-drive, we can
> access it without any problems. However, when creating the
> same virtual folder on the D-drive, we get a popup to
> authenticate. All IIS settings are the same for the 2 test
> folders, and the NTFS permissions are set to full control
> for everyone (to test with).
>
> After severe troubleshooting, we noticed that we can
> access the virtual dir on D: when we are using an account
> that has the "log on locally" right on the server.
>
> Can someone tell why this right is needed in the first
> place? And if it's needed, why does the C-drive virtual
> folder always work fine, even when the account does not
> have the right?
Most likely a delegation issue. With Windows Integrated authentication, the
password is never sent so IIS does not have the user's password to use to
authenticate to the SAN. You might find this helpful:
http://support.microsoft.com/default.aspx?scid=kb;en-us;214806
-- Tom Kaminski IIS MVP http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS http://mvp.support.microsoft.com/ http://www.microsoft.com/windowsserver2003/community/centers/iis/
- Next message: Tom Kaminski [MVP]: "Re: How can I restrict access to a folder on my IIS website?"
- Previous message: Tom Kaminski [MVP]: "Re: Administration Question"
- In reply to: Tim: ""Logon Locally" right needed?"
- Next in thread: Rob Greene: "RE: "Logon Locally" right needed?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
