IIS 6.0 anonymous access

stephanegregoire_at_gmail.com
Date: 05/24/05

  • Next message: Jeff Fink: "Disabling COM objects accessible via IIS" 
    Date: 24 May 2005 07:34:21 -0700

    Hi,

    This problem is driving me nuts.

    - I have set up an IIS 6.0 application (in perl/cgi) and put it into a
    virtual directory (actually it's a SOAP webservice)
    - Since this app does AD domain administration tasks, it must run under
    a "Domain Admin" account.
    - Users accessing it are not domain admins.
    - For testing, I've checked the "Enable anonymous access" box and put
    domain admins credentials in the textboxes. *This way everything works
    like a charm*

    Now, of course, I want to control who can run this application.

    - I tried disabling anonymous access, and enabling the "Windows
    integrated authentication" then set the proper NTFS security rights on
    my virtual directory.
    this way, I get "401 unauthorized" messages.

    - I tried putting a domain admin account in the Application Pool
    "Identity" tab, and this gives the same results.

    Is there a way in IIS to allow a group of people to access an
    application and have that application run always under the same
    specific admin account, without using the Anonymous Authentication ?

    Thanks for any info.

  • Next message: Jeff Fink: "Disabling COM objects accessible via IIS"

    Relevant Pages

    • Re: VB.Net WMI Windows Server 2003
      ... The domain admin account should be able to perform this action. ... NotFound management exception indicates that the management object you are ... Please do not send e-mail directly to this alias. ...
      (microsoft.public.dotnet.languages.vb)
    • Re: VB.Net WMI Windows Server 2003
      ... The domain admin account should be able to perform this action. ... NotFound management exception indicates that the management object you are ... Please do not send e-mail directly to this alias. ...
      (microsoft.public.win32.programmer.wmi)
    • Re: Profile Problem
      ... I rebooted and logged in as a different domain admin account, ... I did reboot and am signed in another domain admin. ... My problem is the domain admin profile is corrupt or something becuase it ...
      (microsoft.public.windows.server.general)
    • Re: W2k3 - Recover from lost Domain Admin passwords
      ... > microsoft.public.windows.server.security, Ulf B. Simon-Weidner ... >> your passwords are more easily compromised if you leave this whole open. ... Don't use the domain admin account, but create admin accounts which are ... Treat the service accounts like your domain admin account. ...
      (microsoft.public.windows.server.security)
    • Re: Active Directory Migration Tool /User rights
      ... > I would appeciate anyone's help on this... ... I would like to give the domain admin ... > I can do it using the Enteprise Admin account. ...
      (microsoft.public.exchange2000.active.directory.integration)