Re: Strange IIS Server behavior

From: Neo (sunilj20_at_msn.com)
Date: 04/06/04


Date: 5 Apr 2004 23:22:53 -0700

hi

Well what i ment was in IIS for this virtual directory, we have
authentication set to Anonymous access with IUSER_<MachineName> and
Window Integated.

In the website internally, we have a login module which is
authenticated with data stored in the database (Which i have written
by code).

about the situations :
1. Logged in as IISUSER (in Power Users group) on the local server and
 access the website - No access Locally as well as from a remote
machine. Gives a 401.2 error (HTTP 401.2 - Unauthorized: Logon Failed
Due to Server Configuration with No Authentication)
2. Logged in as IISUSER (in Admininstrators group) on the local server
and
 access the website - Able to access the complete site locally as well
as from a remote machine. No problems at all.
3. On any other machine, anonymously access the website remotely -
When we log in on the server as IISuser (in Power Users group), no
access and when we log in on the server as IISuser (in Admininstrators
group), ... get complete access and site works fine.

All NTFS permissions are granted to both Logins and read access to
everyone. I know my problem is wierd ... but somehow i have to solve
it.

Cheers

Neo

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message news:<#wHxc#eGEHA.3592@TK2MSFTNGP10.phx.gbl>...
> IIS does not have custom authentication driven by a database, so you have
> either implemented your own authentication scheme or is using some custom
> 3rd party code to do it. In either case, since authentication is not
> handled by IIS, any failures are likely to be your own issues. At this
> point, I do not even know if the 401.2 is a real error or something
> fabricated by your custom code... so you'll have to tell me how
> authentication is configured for your website.
>
> Can you tell me whether access is possible in the following situations:
> 1. Logged in as IISUSER (in Power Users group) on the local server and
> access the website
> 2. Logged in as IISUSER (in Admininstrators group) on the local server and
> access the website
> 3. On any other machine, anonymously access the website remotely
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Neo" <sunilj20@msn.com> wrote in message
> news:f85d7e34.0404020447.12d6f41d@posting.google.com...
> Hi all...
>
> We have recently encountered a problem in a site. We have a local user
> "iisuser" which is used to log into the server. I that the site was
> installed under this user (which I don't know). The problem is that
> since past few days the users are unable to access the site when the
> server is logged in with "iisuser" user.<o:p></o:p>
>
> "iisuser" user is the local user of the machine and is not part of the
> domain.<o:p></o:p>
>
> "iisuser" user if added in administrators group of the machine, then
> all works perfectly fine without any problem. In fact if u log in the
> server as administrator, then the site works perfectly fine.
> <o:p></o:p>
>
> This "iisuser" user is in the Power Users group of the
> machine.<o:p></o:p>
>
> <o:p> </o:p>The error that is displayed is in the website after when
> we log on, we get a HTTP 401.2 - Unauthorized: Logon Failed Due to
> Server Configuration with No Authentication on the page, after
> entering a username and password. The authentication for the site is
> database, and it is an ASP Site.
>
> <o:p> </o:p>We are told that the system used to work fine till a last
> few weeks and nothing has been changed on the server. Still now the
> website is accessible only to administrator user and not any other
> user in the local machine.
>
> We have done the following :<o:p></o:p>
>
> Added user "iisuser" in guests
> Added user "iisuser" in power users (it was already there)
> Added user "iisuser" in Administrator > Local security policies > Log
> on locally
> Added user "iisuser" in Operators tab in IIS<o:p></o:p>
>
> Checked the IIS Authentication for the website . It is Anonymous with
> user IUSER_<MachineName>, and also windows integrated.<o:p></o:p>
>
> IIS admin service starts with the local system account. We tried to
> give it the shutdown account, but it wouldn't start.
>
> What could be the problem?? How can be a local ASP site be accessible
> to users in administrator group and cannot be accessible to another
> local user???
>
> Thanx in advance
>
> Neo



Relevant Pages

  • Re: Permission Problems SBS2003 R1
    ... website on the SBS server? ... Default permissions and user rights for IIS 6.0 ... Step 3: Please check the permissions in IIS manager: ... Step 4: Re-running CEICW on SBS server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... > By this, I mean, usually, on the basic logon screen of a server, I see ... >>;) under the website in question, enabling only Basic authentication. ... and can use the local administrator account to successfully ...
    (microsoft.public.inetserver.iis.security)
  • Re: WM5 can not sync to exchange
    ... I checked all the authentication settings and they are as you requested. ... After running the internet connection wizard I had to uncheck the Require ... On the SBS 2003 Server open the Server Management console. ... Open IIS Manager ...
    (microsoft.public.windows.server.sbs)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... By this, I mean, usually, on the basic logon screen of a server, I see ... >;) under the website in question, enabling only Basic authentication. ... > - When testing with IE or FrontPage local to the webserver for a baseline ... From a website perspective, I ...
    (microsoft.public.inetserver.iis.security)
  • RE: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... ;) under the website in question, enabling only Basic authentication. ... IE (and FrontPage too, if I am not mistaken) will interperate the ... lets configure the server extensions on this VDIR....select the ... From a website perspective, I ...
    (microsoft.public.inetserver.iis.security)