Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/21/04 

Date: Sun, 21 Nov 2004 08:39:36 -0700

?? help you with what ?
First, do not use /D deny, instead, remove what should not
be allowed. The identities need Sync as they will want to
hook in order to be notified of changes. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Luis Garcia" <a@a.com> wrote in message
news:e8k$%23$yyEHA.1564@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> I have IIS 6 installed and runnning. I try to denny write access to the
user
> IUSR_%COMPUTERNAME% in the root directory using the xcacls.vbs tool:
>
> cscript xcacls.vbs d:\inetpub\wwwroot /E /D IUSR_%COMPUTERNAME%:W
>
> The following rigths are dennied:
> SYNCHRONIZE
> FILE_WRITE_DATA
> FILE_APPEND_DATA
> FILE_WRITE_EA
> FILE_WRITE_ATTRIBUTES
>
> Then IIS stop serving pages, it requires authentication.
>
> If I aplpy the same setting using the GUI, only the last four rights are
> dennied, and the system works properly.
>
> Can anybody help me?
>
> Thanx
>
>
>

Relevant Pages

  • Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username
    ... The identities need Sync as they will want to ... Microsoft MVP (Windows Server System: ... > Then IIS stop serving pages, ...
    (microsoft.public.windows.server.scripting)
  • Re: Access Sync service
    ... I might look at RDA with Access, and it's great that I don't have to use IIS. ... The last option was Sync Services which I just downloaded. ... I'll go back and look at ADS and see if I can't read some more on it. ...
    (microsoft.public.sqlserver.ce)
  • support: on / off sync issues
    ... whenever I make a change in the IIS console and or restart the IIS ... all the phones switch their settings from their usual sync ... cause the phones to set themselves to "manually sync". ... defaultwebsite - intergrated windows auth + basic auth ...
    (microsoft.public.pocketpc)
  • Re: Activesync Push GPRS Single Server with OWA
    ... Finally we found that we have a n URL SCAN ISAPI filter on the IIS ... We removed that filter and tested the PDA ... Your Account does not have permissions to sync with your current settings. ...
    (microsoft.public.pocketpc.activesync)
  • RE: error with replication fusion - 29045 - sql ce 2.0 on a mobile
    ... identity of the server).The origin of this was: the anonymous account in IIS ... was not declared in sql server 2000 and was not added in the ... (it was initial sync and iis and sql was int the same machine) ...
    (microsoft.public.sqlserver.ce)