Resetting IUSR user token

From: Ard (Ard_at_discussions.microsoft.com)
Date: 06/24/05 

Date: Fri, 24 Jun 2005 04:25:02 -0700

Folks,

Maybe someone can help me out here.

I'm working on an ASP web application on a w2k server with iis 5.
The application dynamically creates folders and uses adsi to create local
windows groups that have access to these folders.
Because the group 'authenticated users' is member of one of the new windows
groups, the IUSR account should have access to the new folder. But because
the IUSR user token is cached for 15 mins anonymous users can't immediately
access this folder, but have to wait untill the TimeToLive for the IUSR token
has expired.

Because of the performance penalty i don't want to reduce the UserTokenTTL
for all users. (The possible solution described in KB152526.)

Is it possible to force the expiration of the IUSR user token? If I can
expire just this one token immediately after creating the windows groups, the
problem should be solved.

Does anyone know a way to accomplish this?

Relevant Pages

  • Re: Resetting IUSR user token
    ... I don't see this is possible other than the KB or restart the IIS services ... > windows groups that have access to these folders. ... the IUSR account should have access to the new folder. ...
    (microsoft.public.inetserver.iis.security)
  • PROBLEM SOLVED by Thomas Poett Principle Consultant
    ... do you mean no other virtual folders exist in IIS ... Internet Information Services settings are not correct. ... >> | Default website is listening on a port other than port 80, ...
    (microsoft.public.windows.server.sbs)
  • Re: Need help setting up remote desktop.
    ... I have been trying to work my way through this using the help files. ... The reason I wanted to use the web based method is that I wanted to temporarily ... those folders, the way I can with the people who are on the home network (D-Link ... I am assuming for now that is connected to the use of IIS, ...
    (microsoft.public.windowsxp.network_web)
  • Directory Names with Executable Extensions...
    ... I have read a number of posts in news groups about this issue with IIS ... The WiderNet Project is a non-profit project that collects, ... NT or Win2k server running IIS on the campus network, ... and the files are saved in project folders. ...
    (microsoft.public.inetserver.iis)
  • Re: Security Scan on IIS shows files and folders
    ... > Recently our comapny had a Professional Security Scan done one of our ... I recommend checking your IIS web logs. ... who can guess the name of the files and folders can view them. ... to .Old or .Bak is a serious problem as the attacker gets to see your .ASP ...
    (microsoft.public.inetserver.iis.security)