Re: Locked User Accounts On IIS 5.0

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 12/23/04

  • Next message: Bernard: "Re: Free/Busy FTP Site" 
    Date: Thu, 23 Dec 2004 11:26:46 +0800

    :-) that's IIS 

    -- 
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"Scilabop" <scilabop@Xuvic.ca> wrote in message 
news:elGOG8E6EHA.4028@TK2MSFTNGP15.phx.gbl...
> Having my own authentication check would involve other security issues. I
> think I'd take advantage of the built IIS one.
> I now have an idea in my mind. When an authentication fails, the HTTP 401
> error triggers a script, which queries the security event log with a WMI
> object, and identifies the failure reason with the EventCode, for an
> example, 531 for disabled account.
> I haven't figured out  how the vbscript codewould look like. The first
> problem I encountered here is mapping the HTTP 401 error to an URL. What
> Bernard replied on my posting on Dec.17 seems to be right. I just can't do
> the URL mapping. Annoying...
>
> Ally
>
>
> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
> news:eFIePy95EHA.3736@TK2MSFTNGP10.phx.gbl...
>> Unless you are doing your own authentication check, and OS replied you
> with
>> the correct status. AFAIK, you can't achieve this with built IIS
>> authentication and log file status code.
>>
>> -- 
>> Regards,
>> Bernard Cheah
>> http://www.tryiis.com/
>> http://support.microsoft.com/
>> http://www.msmvps.com/bernard/
>>
>>
>>
>> "Scilabop" <scilabop@Xuvic.ca> wrote in message
>> news:eY8KD165EHA.1408@TK2MSFTNGP10.phx.gbl...
>> > Hi Chad,
>> >
>> > I am working on this too. But I haven't got a clue. You might want to
> read
>> > my posting of "identify disabled users and bad passwards" on Dec. 17.
> Hope
>> > to share any information we get.
>> >
>> > Thanks.
>> >
>> > Ally
>> >
>> >
>> > "wallywombat" <wallywombat@gmail.com> wrote in message
>> > news:1103649832.016501.232700@c13g2000cwb.googlegroups.com...
>> >> Is there a way I can customize an http error message so that if the
>> >> users account is locked out that it displays a message stating that 
>> >> the
>> >> account is locked out rather than the normal access denied message
>> >> (401).
>> >>
>> >> Chad
>> >>
>> >
>> >
>>
>>
>
>
  • Next message: Bernard: "Re: Free/Busy FTP Site"

    Relevant Pages

    • Re: Basic Authentication fails with Error 401.2 where Integrated s
      ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
      (microsoft.public.inetserver.iis.security)
    • Re: Authentication Problem - Help
      ... I just had similar - and I strongly suspect it's NT security. ... > implies impersonate the LOGON user specified by IIS ... > expired process is shutdown and a new process is ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Cannot Default Domain?
      ... API is not using the server's domain in its operations. ... > of the authentication protocol you use and is outside of IIS control. ... IIS calls security API calls which understand the blob and does its ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS file system writes across domains
      ... the process should be running under the context of the IIS ... Have the remote server turn on file auditing and check the security event ... > Integrated Windows Authentication which in my opinion means that the ...
      (microsoft.public.inetserver.iis.security)
    • Re: can someone explain this weird behaviour?
      ... IIS to also authenticate with another protocol before even allowing ... authentication scheme seems confusing, and I agree -- and that is why ... The "Dir Security" property you change is one of the ... But for the same asp.net application with the same login control etc.. ...
      (microsoft.public.inetserver.iis.security)