Re: Unable to Access Webpage -> "The user has not been granted the requested..."

From: Zack Schneeberger (schneebie1_at_hotmail.com)
Date: 09/29/04 

Date: 29 Sep 2004 10:26:54 -0700

Mike - I appreciate your help but there are no accounts in the "Deny
access to
this computer from the network." This is really stumping me. Any other
ideas?

What is the difference between 'Log on Locally' and 'Access this
computer from the network?'

Zack
"Miha Pihler" <mihap-news@atlantis.si> wrote in message news:<unAwWSZpEHA.4008@TK2MSFTNGP14.phx.gbl>...
> Check that e.g. everyone or accounts used are not in e.g. Deny access to
> this computer from the network. Deny will override allow policy.
>
> Mike
>
> "Zack Schneeberger" <schneebie1@hotmail.com> wrote in message
> news:a2aa04c0.0409280927.51c477d7@posting.google.com...
> > The 'Everyone' group is included in the "Access this computer from the
> > network" so I don't think that that is the problem. Any other ideas?
> >
> > Zack
> >
> > "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:<uY9k$0KpEHA.2612@TK2MSFTNGP15.phx.gbl>...
> > > Hi Zack,
> > >
> > > You will have to edit local policy. Click on Start -> Run -> gpedit.msc
> and
> > > click OK.
> > >
> > > Under Computer Configuration -> Windows Settings -> Security Settings ->
> > > Local Policies -> User Rights Assignment and look for "Access this
> computer
> > > from the network". Double click on this policy and make sure that e.g.
> > > Authenticated Users group is in this policy. You can also try and add
> one of
> > > your users in this policy. After this is done close the policy and try
> to
> > > access website using this account that you added to the policy.
> > >
> > > I hope this helps,
> > >
> > > Mike
> > >
> > > "Zack Schneeberger" <schneebie1@hotmail.com> wrote in message
> > > news:a2aa04c0.0409270743.5f0d3d94@posting.google.com...
> > > > I am using basic authentication to grant users access to a secure page
> > > > that I am hosting. When they try to log they are unable to. In the
> > > > event viewer I get:
> > > >
> > > > Logon Failure:
> > > > Reason: The user has not been granted the requested
> > > > logon type at this machine
> > > > User Name: testuser
> > > > Domain: MYDOMAIN
> > > > Logon Type: 2
> > > > Logon Process: IIS
> > > > Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> > > > Workstation Name: SERVER21
> > > >
> > > >
> > > > However, if I make all 'Authenticated Users' part of the
> > > > 'Administrator' group local to the machine, they are granted access
> > > > and they webpage works. This is very unsecure. How do I fix it?
> > > >
> > > > Zack

Relevant Pages

  • Re: Wireless clients, 2 SSIDs and SBS - need recommendations
    ... Mike> Hadn't really thought of a separate IP network. ... You could buy or build a dedicated firewall, ... filtering rule set that only allows access from the guest network to ...
    (microsoft.public.windows.server.sbs)
  • Re: Wireless clients, 2 SSIDs and SBS - need recommendations
    ... Mike> Hadn't really thought of a separate IP network. ... You could buy or build a dedicated firewall, ... filtering rule set that only allows access from the guest network to ...
    (microsoft.public.windows.server.sbs)
  • Re: Explorer crashes when I open a folder or view drives in my com
    ... I will look at the network issues if I can. ... Mike on the south coast of the UK ... Explorer needs to re start message is displayed ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Denying network access to all but one application
    ... there are certainly group polices that allow to sandbox the whole system, like removing explorer, deny access to the cmd, remove the start menu and more.... ... network folder, for allowing clients to access it. ... A mischevious person can use Explorer etc. to ...
    (microsoft.public.dotnet.security)
  • IPFW-2 help please
    ... One machine is attached to the 2.0 network. ... 08000 deny ip from any to 192.168.2.254 dst-port 23 ... 08200 allow ip from any to any in via dc2 keep-state ... If I move Rule 8000 before Rule 1600, packets are blocked ...
    (freebsd-questions)