Re: anonymous access denied

• Previous message: JustMe_at_Home: "Re: How can I read FrontPage Admin/Author/Browse permissions for each subweb?"
• In reply to: gv: "anonymous access denied"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 5 Mar 2004 00:19:13 -0700

When you dcpromo a DC down the existing domain
accounts are invalidated. Since your IIS installation
was done after the SBS2k3 server was a DC, all of
the backend and access accounts are now invalid.

The most direct route to establishing a functioning
IIS at this point, assuming you do want to keep the
machines as a non-DC (an expensive use of an SBS2k3
license) is to secure copies of your web content to a
separate location, and to then uninstall and reinstall
IIS, followed by re-establishing the content. This will
cause the needed backend and access accounts and their
wiring to be hooked up for the account database as it now
exists.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<gv> wrote in message news:%23f3rfpnAEHA.684@tk2msftngp13.phx.gbl...
> I removed AD from my webserver (win 2k3 small bus edition) and now my web
> sites say that I am not authorized to view the page (even from the web
> server itself).  I check IIS (6.0) and it definitly has allow anonymous
> checked, I made sure that there is no integrated security checked, I also
> opened up the permissions thru IIS and on the disk, but still no go.  I
even
> gave the IUSR account admin rights, but still no go.  And of course a
wizard
> that allows you to configure the server, was available before I removed AD
> is now no longer available.  The web sites worked fine until I removed AD.
> I didn't install AD on this box, it came already setup from dell.  I
> successfully installed AD & DNS on another box, and now removal of it from
> my webserver has caused my websites to not accept anonymous
authentication.
> It seems that anonymous access is no longer allowing anonymous access.
When
> I do have the intergrated security checked off, I can authenticate (with
> admin only, IUSR does not authenticate) and view the web site normally.  I
> think removing active directory messed up either the IUSR account or some
> other security policy.
> Any help will be greatly appreciated.
> Thanks
> gv
>
> ps I just did a search on this NG for my subject and I did pretty much try
> everthing that I've seen for answsers and still no go.
> ie, made sure passwords for the IUSR accounts matched in IIS and the user
> account, checked the local security policy and made sure IUSR had access
to
> allow log on locally, and access the computer from a network,
>
>

• Previous message: JustMe_at_Home: "Re: How can I read FrontPage Admin/Author/Browse permissions for each subweb?"
• In reply to: gv: "anonymous access denied"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]