Re: Flaw in default permissions

Mixture of Documentation errors and "backwards compatibility" cruft.

This is how basic/anon authentication, network_cleartext, and "Logon
Locally" all fit together.

http://blogs.msdn.com/david.wang/archive/2006/07/01/IIS_Security_Templates_and_Anonymous_Authentication.aspx

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Anthony Yates" <anthony.yates@xxxxxxxxxx> wrote in message
news:%237Ql$DdpGHA.1140@xxxxxxxxxxxxxxxxxxxxxxx
Furthermore, the document says that Anon also requires the Logon Locally
right. However another document:
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/cf438d2c-f9c7-4351-bf56-d2ab950d7d6e.mspx?mfr=true
explains that in IIS6 basic and anon authentication by default use the
NETWORK_CLEARTEXT method which does not require Logon Locally rights.
Any comments on that one?
Anthony



"Anthony Yates" <anthony.yates@xxxxxxxxxx> wrote in message
news:%233lV49cpGHA.1440@xxxxxxxxxxxxxxxxxxxxxxx
The documentation states that the IUSR account by default has Read,
Execute NTFS permissions to the web site folders:
http://support.microsoft.com/?kbid=812614
I have done many default installations and it does not. It just has a
Deny Write. Any comments? Is that just a straightforward documentation
error?
Anthony





.

Relevant Pages

  • RE: Setting computer name
    ... Logon as administrator, open the "System" control panel applet and modify ... documentation for instructions on how to logon as Administrator and how to ...
    (microsoft.public.windowsxp.embedded)
  • Re: Flaw in default permissions
    ... That is not good about the documentation. ... This is how basic/anon authentication, network_cleartext, and "Logon ... NETWORK_CLEARTEXT method which does not require Logon Locally rights. ... Execute NTFS permissions to the web site folders: ...
    (microsoft.public.inetserver.iis.security)
  • Re: Flaw in default permissions
    ... Its really quite an important documentation error. ... This is how basic/anon authentication, network_cleartext, and "Logon ... NETWORK_CLEARTEXT method which does not require Logon Locally rights. ...
    (microsoft.public.inetserver.iis.security)
  • Re: remove mapping
    ... Never mind. ... I found my documentation on how to set all this up and also ... a mapping that was set up to reconnect at logon. ...
    (microsoft.public.win2000.general)