Re: file security/authentication



OK, so I must be missing something, or just do not get
what "vice the actual user . . . " means.
So, what you have done is not effecting what you want?
You did ACL the restricted part with a grant to the account(s)
that should have access ? Ideally this is with a group from
the domain that is also either in the IIS's Users group or is
granted network logon user right.

--
Roger Abell
Microsoft MVP (Windows Server : Security)

"Carl Hilton" <someone@xxxxxxxxxxxxx> wrote in message
news:ewSAGBvlGHA.3588@xxxxxxxxxxxxxxxxxxxxxxx
OK, I thought I had tackled this before a while a ago but forgot what I
did...

I am running IIS6 on a W2K3 server. for most of my site I have Anonymous
access authorized. I have one file that I want to use the local system
ACLs to authenticate with... I have turned off Anonymous access, I have
Integrated Authentication turned on. I have removed IUSR_XXXX from the
local ACL's. If I use my IE to access the file, the audit log shows a
failure for IUSR vice the actual user....

This is on an internal INTRANET,

How can I tweak the system so that the actual user's credintials are used
to verify file permissions.

Thansk
Carl




.



Relevant Pages

  • Re: Script access - IIS 6
    ... I have reset the ACL to allow anonymous access and everything works. ... > If you make requests of the form ... > I want to ask you whether the CGI works with keep-alive correctly or not. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Permissions required for "Network Service" grp
    ... Web-accessible content must have at least the Read ACL for the IIS_WPG group ... authenticated identity implied by your IIS Authentication settings. ... do you know if your web pages *require* Local System to operate? ... "Network Service" group requires. ...
    (microsoft.public.inetserver.iis)
  • Re: HTTP 401.3 - Access denied by ACL on resource
    ... deny by ACL -- the remote authenticated user does not have permission ... If Anonymous access is enabled, then make sure the configured anonymous user ... has access to the resource. ...
    (microsoft.public.inetserver.iis)
  • Re: Access control list delay
    ... It is possible you have so many users on the ACL it is taking that long to enumerate the list. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.windows.server.active_directory)
  • Anonymous Access denied
    ... site has a anonymous access allowed and "Everyone" access from ACL. ... the users are able to access the site whereas some dont. ... Nejmos Saqeb ...
    (microsoft.public.inetserver.iis)