Re: Server 2003 NTFS security for MP3 files doesn't work

On Jun 15, 3:02 pm, Steve in Santa Rosa
<SteveinSantaR...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I am setting up a 2003 server to replace a 2000 server. I have transferred
an IIS web site and set it up identically. Part of the site is secured by
NTFS file and folder permissions. All of the content in the protected part
of the site is accessible to users with proper permissions as expected,
except for MP3 files, which generate a "Windows Media Player cannot access
the file" error 0xC00D11D2. The problem only occurs with MP3 files. This
configuration was working on the 2000 server.

If I add the Users group to the permissions for the protected part of the
site, it works (probably because it indirectly contains the IIS anonymous
accounts), but that eliminates the desired security. There is some right or
permission associated with the Users group that allows access to MP3 files,
but I don't know what it is.

I have tried turning on (and off) integrated Windows authentication, to try
basic authentication; no difference. I also tried turning Windows Media
Server off on the 2003 server (which matches the 2000 server configuration).
I suspected WMS required the anonymous IIS accounts and was therefore
preventing NTFS permissions from working. That didn't solve the problem.

Any help would be appreciated.


IIS does not do anything special regarding MP3 files.

How exactly are you accessing the MP3 file to result in "Windows Media
Player cannot access the file" error 0xC00D11D2.

In particular, are you making an HTTP request to retrieve the MP3 file
or some other protocol. What client software is used?

If IIS serviced the request, you should see evidence of the request in
its log files. Provide that.

I am suspecting that *maybe* when you retrieve MP3 files with Windows
Media Player that it tries to read some other metadata file with an
extension that is not allowed for download by IIS6 on Windows Server
2003 by default. This security restriction did not exist on static
files on Windows 2000 Server. However, this suspicion has to be proven
by ensuring the client actually made HTTP requests serviced by IIS6
and that IIS6 logs indicate rejection. Otherwise, this is just
unsubstantiated speculation.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

.