Re: IIS6 - Anonymous Login browsing of website not working..

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 10/28/04


Date: Thu, 28 Oct 2004 03:39:19 -0700

This error also happens when you have:
1. IIS6 on a domain server
2. Integrated Authentication is used (i.e. Negotiate)
3. Custom AppPool Identity is used

Read this Documentation URL for the answer:
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/ca_cfgwrkridentity.asp

If you get the error out of the box, then the problem comes from your domain
and or its policies.

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Graham Tapscott" <Graham Tapscott@discussions.microsoft.com> wrote in
message news:0EC955A1-A99A-463C-89FF-CD7682DE9E21@microsoft.com...
Seen alot asked about this problem but very few answers.
Have an IIS6 webserver that is bringing up a dialog box when users try to
access any webpage.
If I cancel out I get
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.
Internet Information Services (IIS)
And the Event viewer shows..
Logon Failure:
  Reason: User not allowed to logon at this computer
  User Name: IUSR_xxxxxx
  Domain: XXXXXX
  Logon Type: 8
  Logon Process: Advapi
  Authentication Package: Negotiate
  Workstation Name: xxxxxx
  Caller User Name: NETWORK SERVICE
  Caller Domain: NT AUTHORITY
I have checked that the following is good.
NTFS permissions for IUSR
Registry Key permissions for IUSR
Anonymous Access Allowed in IIS Administration Tool
IUSR has login locally permissions and access computer remotely
I have uninstalled and reinstalled IIS6 and get the same error out of the
box.
Only thing that seems to work is adding IUSR to the Administrators group.
Which isn't a valid solution ;)
Thanks much for any help,
Graham Tapscott
Sr. Web Systems Administrator
AIR
g_tapscott@hotmail.com


Relevant Pages

  • Re: resetting IUSR password
    ... You can find out more information about this in the IIS6 Resource Kit: ... This is also documented in the IIS Online Help (which I suggest you ... from IUSR to a windows account ... setting it back to IUSR requires a password prompt. ...
    (microsoft.public.inetserver.iis.security)
  • IIS6 Win2003 & NT4 Domain Authentication
    ... We have a Win2003 server and installed Crystal Enterprise on this. ... IIS6 is enabled for both Basic and Integrated Authentication without anonymouse access. ...
    (microsoft.public.inetserver.iis)