Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username

From: dogbertyh (dogbertyh_at_yahoo.com)
Date: 03/12/05

  • Next message: Tom Allen: "Cannot set up an ftp site with restricted access" 
    Date: 12 Mar 2005 13:48:12 -0800

    I know this thread is kind of old, but I have discovered a solution to
    this problem:

    xcacls.vbs d:\inetpub\wwwroot /E /D IIS_Anonymous:E9532

    This will deny only:
    FILE_WRITE_DATA
    FILE_APPEND_DATA
    FILE_WRITE_EA
    FILE_WRITE_ATTRIBUTES

    Conspicuously missing is SYNCHRONIZE. By looking at the help for this
    command, one would think that the "E" in "E9532" would set SYNCHRONIZE
    to deny, but it has the opposite effect (without granting any rights).
    Perhaps this is a bug, but adding "E" to the special permissions works
    around it.

    Luis Garcia wrote:
    > Hi,
    >
    > I have IIS 6 installed and runnning. I try to denny write access to
    the user
    > IUSR_%COMPUTERNAME% in the root directory using the xcacls.vbs tool:
    >
    > cscript xcacls.vbs d:\inetpub\wwwroot /E /D IUSR_%COMPUTERNAME%:W
    >
    > The following rigths are dennied:
    > SYNCHRONIZE
    > FILE_WRITE_DATA
    > FILE_APPEND_DATA
    > FILE_WRITE_EA
    > FILE_WRITE_ATTRIBUTES
    >
    > Then IIS stop serving pages, it requires authentication.
    >
    > If I aplpy the same setting using the GUI, only the last four rights
    are
    > dennied, and the system works properly.
    >
    > Can anybody help me?
    >
    > Thanx

  • Next message: Tom Allen: "Cannot set up an ftp site with restricted access"
    • Quantcast