Re: IIS 6 Authentication Problem - Not Happening

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 10/11/04

  • Next message: Pupo: "Connect to IIS from another Pc" 
    Date: Mon, 11 Oct 2004 11:02:14 +1000

    Hi

    Mucking with NTFS permissions isn't going to help. FPSE2002 is implemented
    as an ISAPI filter that intercepts incoming requests and does its own
    permissions checking. If you muck with the NTFS permissions, you're probably
    most likely going to break something.

    If you reset everything, and then check the Windows Security event log, do
    you see any Logon failure events?

    Another place to try this question would be in an FPSE group - might be more
    FPSE experts there.

    Cheers
    Ken

    "JoeH" <anonymous@discussions.microsoft.com> wrote in message
    news:2f5101c4ad82$1ca02eb0$a601280a@phx.gbl...
    >I have an intranet web site running on IIS 6 where users
    > are given access through the FrontPage Server Extensions
    > 2002 admin web tool.
    >
    > The root site and most subsites have the same permissions
    > with anonymous browse access. Few subsites use unique
    > permissions. Users logged on with NT Domain accounts
    > (2003 server) can edit subwebs where they have advanced
    > author access. On some subwebs they are prompted for
    > credentials which fail when entered properly.
    >
    > The local security group for the problem subwebs lists
    > their NT account on the _advauthor group which has List
    > NTFS Permissions to the correct directory. Access to the
    > same directory through an NT File Share works fine for
    > the same users. Access to other subwebs for the same
    > users works fine. Access to the problem subweb works
    > fine for other users and always for me with server admin
    > rights and web admin rights.
    >
    > I've chased this one time and time again. On rare
    > occasion re-adding the user to the local security group
    > fixes the problem. Using global groups in place of
    > explicit permissions doesn't help, reapplying NTFS
    > permissions doesn't help, using different client machines
    > doesn't help. Rebuilding front page extensions on the
    > subweb doesn't help.
    >
    > Any suggestions besides scraping Front Page Server
    > Exstensions?
    >
    > Thanks
    >
    > Joe
    >

  • Next message: Pupo: "Connect to IIS from another Pc"

    Relevant Pages

    • Re: NTFS and shared permissions
      ... > I have a few questions about NTFS permissions and share that I hope ... I know that NTFS permissions are applied to ... NTFS permissions are of course needed for control of accounts ... down from a more broad NTFS grant). ...
      (microsoft.public.security)
    • Re: Need Help on Assigning Specific Permissions to Shares
      ... can not be changed which would leave only ntfs permissions to control ... in groups to have necessary ntfs permissions. ... XP uses simple file sharing by default. ... > XP Pro but it doesn't say it works in Home edition. ...
      (microsoft.public.windowsxp.security_admin)
    • RE: Migrating File servers
      ... shared permissions separately. ... For NTFS permissions, we can use the Windows 2000 Resource Kit tool ... Copy all the data from the old file server to target file server. ...
      (microsoft.public.windows.server.migration)
    • Re: recovering NTFS volumes
      ... If ntfs permissions are not being copied when data is backed up then I believe it ... If the files did not include the administrators group ... but instead a user/group unique to the operating system that is was backed up from, ...
      (microsoft.public.win2000.security)
    • Re: Local Group Restricted to Internet Explorer Browser only
      ... combination of group policy, group membership, and ntfs permissions. ... permissions by themselves can control access fairly well to installed ... applications and data that reside in root or program files folder. ...
      (microsoft.public.win2000.security)