Re: Strange IIS Server behavior

From: Andrew Davis [MS] (adavis_at_online.microsoft.com)
Date: 04/03/04 

Date: Sat, 03 Apr 2004 03:18:43 GMT

--------------------
>From: jcochran.nospam@naplesgov.com (Jeff Cochran)
>Subject: Re: Strange IIS Server behavior
>Date: Fri, 02 Apr 2004 20:36:09 GMT
>Organization: City of Naples, Florida
>Message-ID: <4077ce89.709402156@msnews.microsoft.com>
>References: <f85d7e34.0404020447.12d6f41d@posting.google.com>
>X-Newsreader: Forte Agent 1.5/32.451
>MIME-Version: 1.0
>Content-Type: text/plain; charset=ISO-8859-1
>Content-Transfer-Encoding: 8bit
>Newsgroups: microsoft.public.inetserver.iis.security
>NNTP-Posting-Host: ns1.naplesgov.net 209.26.8.10
>Lines: 1
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis.security:10881
>X-Tomcat-NG: microsoft.public.inetserver.iis.security
>
>On 2 Apr 2004 04:47:26 -0800, sunilj20@msn.com (Neo) wrote:
>
>>Hi all...
>>
>>We have recently encountered a problem in a site. We have a local user
>>"iisuser" which is used to log into the server. I that the site was
>>installed under this user (which I don't know). The problem is that
>>since past few days the users are unable to access the site when the
>>server is logged in with "iisuser" user.<o:p></o:p>
>>
>>"iisuser" user is the local user of the machine and is not part of the
>>domain.<o:p></o:p>
>>
>>"iisuser" user if added in administrators group of the machine, then
>>all works perfectly fine without any problem. In fact if u log in the
>>server as administrator, then the site works perfectly fine.
>><o:p></o:p>
>>
>>This "iisuser" user is in the Power Users group of the
>>machine.<o:p></o:p>
>>
>><o:p> </o:p>The error that is displayed is in the website after when
>>we log on, we get a HTTP 401.2 - Unauthorized: Logon Failed Due to
>>Server Configuration with No Authentication on the page, after
>>entering a username and password. The authentication for the site is
>>database, and it is an ASP Site.
>>
>><o:p> </o:p>We are told that the system used to work fine till a last
>>few weeks and nothing has been changed on the server. Still now the
>>website is accessible only to administrator user and not any other
>>user in the local machine.
>>
>>We have done the following :<o:p></o:p>
>>
>>Added user "iisuser" in guests
>>Added user "iisuser" in power users (it was already there)
>>Added user "iisuser" in Administrator > Local security policies > Log
>>on locally
>>Added user "iisuser" in Operators tab in IIS<o:p></o:p>
>>
>>Checked the IIS Authentication for the website … It is Anonymous with
>>user IUSER_<MachineName>, and also windows integrated.<o:p></o:p>
>>
>>IIS admin service starts with the local system account. We tried to
>>give it the shutdown account, but it wouldn't start.
>>
>>What could be the problem?? How can be a local ASP site be accessible
>>to users in administrator group and cannot be accessible to another
>>local user???
>
>Checked NTFS permissions?
>
>Jeff
>
Take a look at this article. Keep in mind that authentication methods can
be configured at the site, folder and file level.

253667 Error Message: HTTP 401.2 - Unauthorized: Logon Failed Due to Server
http://support.microsoft.com/?id=253667

This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks!
~Andrew Davis
Microsoft PSS Security

Relevant Pages

  • Re: Is there malware on my Server?
    ... be exposing to the internet some means of authenticating to the server. ... Anonymous Access is checked and the login uses the ... Integrated Windows Authentication is checked. ... Administrador indicates hack attempts to log on with the Administrator ...
    (microsoft.public.windows.server.security)
  • Re: Strange IIS Server behavior
    ... >server as administrator, then the site works perfectly fine. ... >Server Configuration with No Authentication on the page, ... >IIS admin service starts with the local system account. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... administrator account in order to browse the local website on the server. ... handlers for authentication are noted so "uniquely" as you have said. ... the Logon Process is the weird unicode and the ...
    (microsoft.public.windows.server.security)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... I actually had to log into the server as the account running the scheduled job, then open IE and disable the "Integrated Windows Authentication" option. ... It was such an easy solution because I had to do the same exact thing to the administrator account in order to browse the local website on the server. ... the Logon Process is the weird unicode and the Authentication is 'NTLM'. ...
    (microsoft.public.windows.server.security)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... the built-in administrator account, it does make sense that it would ... handlers for authentication are noted so "uniquely" as you have said. ... from any machine (other than the IIS server) all works just fine. ... the Logon Process is the weird unicode and the Authentication ...
    (microsoft.public.windows.server.security)
Quantcast