Re: Anonymous Account not working

As it is apparently not a content NTFS perrmissions issue it is
perhaps a user rights issue. Have you checked for event msgs
in the Security event log ? Is the Iusr you are using the one
defined during install or a custom one you have created?

--
Roger Abell
Microsoft MVP (Windows Server : Security)

"Ishmealm" <Ishmealm@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2AB2309E-B23F-444A-A957-FE5539EBC4EC@xxxxxxxxxxxxxxxx
Hi,
I recently built a new webserver to replace an existing server. I
copied the data to the new server and rebuilt all of the IIS directories
by
hand. I replaced the broken SID of the old IUSR account on all of the
folders with the new IUSR account from the new server. Now when I try to
access any of the virtual directories anonymously, I am denied access (If
I
access them with basic or integrated, I have access.) Even if I create a
new
VD, I get access denied.

I've created a new folder and applied the IUSR account using the
security tab so that I know it has the right account and there isn't
anything
carrying over from the old server (I also granted it Full Control just to
be
certain it's not a permission problem.) I then created a new VD pointing
to
the new folder. I get access denied. If I change the anonymous username
and
password in IIS to another account with rights, it works.

I then used Adsutil.vbs to get the username and password that the IUSR
acct is using and I manually entered the account info into the directory
security for the anonymous account. I got access denied.

I'm thinking that the password that IIS is using is somehow different
from the password that the local account is using. I'm thinking about
doing
a password change on the local account to the password that Adsutil.vbs
gave
me, but I don't want to break anything worse than it already is. Also
once I
make the change, I want to be able to create new VD's without having to
enter
the anonymous password manually everytime.

Am I going about this the right way or is there something that I'm
missing, doing wrong, or need to do in the metabase when I'm done? Any
help
is greatly appreciated.

Thanks,
Ishmeal




.

Relevant Pages

  • Re: write with cURL
    ... you can stop making excuses. ... Part of Jerrys' security is not letting you on his server... ... up an account for you, process the billing, etc. ...
    (alt.php)
  • Re: write with cURL
    ... you can stop making excuses. ... up an account for you, process the billing, etc. ... possible features from a web site to make up for the security issues. ... Nothing you have told me shows me you know how to lock down a server ...
    (alt.php)
  • Re: write with cURL
    ... It takes time to set up an account for you, process the billing, etc. ... Sorry, my servers are secure. ... Nothing you have told me shows me you know how to lock down a server so that it is secure - other than to use the server's file security. ...
    (alt.php)
  • Re: having problems creating packages - access denied..
    ... I've given a global group (which contains all of the site server computer ... full share permission and also full local security permission. ... SMS uses the site server computer account to connect to ...
    (microsoft.public.sms.admin)
  • Re: Anonymous Account not working
    ... I don't see any security log entries. ... I think the problem may be with the local account. ... built the server there was another server that was named WEB02, ... renamed this server (so that the iusr and iwam accounts would be ...
    (microsoft.public.inetserver.iis.security)