Re: file security/authentication
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Fri, 23 Jun 2006 22:33:58 -0700
OK, so I must be missing something, or just do not get
what "vice the actual user . . . " means.
So, what you have done is not effecting what you want?
You did ACL the restricted part with a grant to the account(s)
that should have access ? Ideally this is with a group from
the domain that is also either in the IIS's Users group or is
granted network logon user right.
--
Roger Abell
Microsoft MVP (Windows Server : Security)
"Carl Hilton" <someone@xxxxxxxxxxxxx> wrote in message
news:ewSAGBvlGHA.3588@xxxxxxxxxxxxxxxxxxxxxxx
OK, I thought I had tackled this before a while a ago but forgot what I
did...
I am running IIS6 on a W2K3 server. for most of my site I have Anonymous
access authorized. I have one file that I want to use the local system
ACLs to authenticate with... I have turned off Anonymous access, I have
Integrated Authentication turned on. I have removed IUSR_XXXX from the
local ACL's. If I use my IE to access the file, the audit log shows a
failure for IUSR vice the actual user....
This is on an internal INTRANET,
How can I tweak the system so that the actual user's credintials are used
to verify file permissions.
Thansk
Carl
.
- Follow-Ups:
- Re: file security/authentication
- From: Carl Hilton
- Re: file security/authentication
- References:
- file security/authentication
- From: Carl Hilton
- file security/authentication
- Prev by Date: Re: security error in IIS logs (401.2 error)
- Next by Date: Re: Keeping a particular intruder out
- Previous by thread: file security/authentication
- Next by thread: Re: file security/authentication
- Index(es):
Relevant Pages
|