Re: IIS prompt for domain userid after server is hardened

"newbie@work" <newbiework@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:38F52FFA-DB3F-42B1-82CC-C7DD9279E7EF@xxxxxxxxxxxxxxxx
Thanks..

I am wondering if I revert back the security settings, would it help to
fix
the problem.


Well, if it worked before and you really did revert (actually get back
to where it was) then one would expect it to work again.

However, you will likely have a very hard time actually reverting, at
least if you did force the permissions you outlined on those directories
and their content. For example, the settings within C:\winnt in a default
setup are rather varied, not uniform.
Also, I do not know where you got the idea that setting permissions as
indicated on the folders listed, but it was not a good idea, and in the case
of repair and config actually would have weakened rather than hardened
a post NT4 system (since you have winnt dir I must assume this is older
or upgrade newer, so your changes may have been for the better but all
depending on what the initial values were).



"Bernard Cheah [MVP]" wrote:

Because with local admin rights - the iusr has sufficient permissions to
access the resource.
You should remove the iusr from admin group, then get filemon / regmon to
trace where iusr is facing access issue.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"newbie@work" <newbiework@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4460E060-94F8-4A57-A969-7664D40FCD80@xxxxxxxxxxxxxxxx
Hi,

I have an issue where the IIS website prompt for domain userid logon
after
the server is hardening by setting the users and everyone group to
read,
execute and list for the following directories

C:\
C:\winnt
C:\winnt\system
C:\winnt\repair
C:\winnt\system32
C:\winnt\system32\config
C:\winnt\system32\spool

The website is able to work after we add the IUSR_computername account
to
the local administrator group.
Any idea what could have cause the above issue and why adding the
IUSR_computername to the administrator group resolve the issue

--
Time 4 a break





.

Relevant Pages

  • Re: Linksys WRT54GS v5.0 Wireless Router question
    ... would suddenly revert to factory default settings on it's own? ... through the DC power lines, or exposure to RF from one of my VHF/UHF ... Most version of the WRT54G firmware that I've tried pass all the ...
    (alt.internet.wireless)
  • Re: Local Policy reverting back to old settings
    ... knowing that this would revert back. ... puts the original local settings back into play. ... We do a scripted install, then apply and local policy settings, and put ... the machines to follow do not have the problem. ...
    (microsoft.public.windows.group_policy)
  • Re: video setting
    ... the settings are on a per-play basis. ... After you play another file ... or exit the settings will revert back. ... > Hi Chris About the format you asking,I play all wmp format video file and ...
    (microsoft.public.windowsmedia.player)
  • Re: IIS 6.0 + ASP HELP!!!!
    ... > You can revert your HTTP.SYS Registry settings as they are not involved ... Your settings also make no sense, ... but doesn't alter response sending ...
    (microsoft.public.inetserver.iis)
  • Re: Built In Admin account vs Created one
    ... Keep in mind that a user who is in the administrator group may ... have the power to change those settings - if they know what they are. ... want to try is to reset a machines security settings back to default or start with at ... I don't know what could be causing it, but when something unusual is going on always ...
    (microsoft.public.win2000.security)