Re: Domain-based IUSR and IWAM accounts

From: Tom Kaminski [MVP] ((A_at_T))
Date: 06/29/05


Date: Wed, 29 Jun 2005 09:57:52 -0400


"Steve" <Steve@discussions.microsoft.com> wrote in message
news:B6C16AAB-48EC-4DF9-98F5-C170330B73EB@microsoft.com...
> We have multiple IIS servers throughout our domain. We are constantly
> running into the issue where the GPO overwrites the local account setting,
> which is default by design.
>
> MS Article 275167 states 3 resolutions.
> Option one is to run iisreset, which our OPS dept is tired of.
>
> Option two is not to run the GPO from the root, something our Engineering
> team doesn't like.
>
> Option three is to create domain based IWAM and IUSR accounts and setting
> permissions on each IIS server to the domain accounts.
>
> Are there any known issues with doing this?
> Thanks in advance,
> Steve

I use domain accounts for these and have not run into any issues.

-- 
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsserver2003/community/centers/iis/
http://mvp.support.microsoft.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS