Re: Stumped by Authentication Problem

"Ken Schaefer" <kenREMOVE@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:OHKs%23YyNIHA.5980@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

This isn't an IIS issue - something is happening lower down in the stack
(e.g. inside LSASS or similar).

The initial request is denied with an Unauthorized (401) HTTP status. The
client then appears to be sending credentials, and the server is returning
500. The Win32 status indicates an internal security error occurred.

I would start by looking in the Windows Event Logs to see if any errors
are being logged there.


Indeed Ken, and might not the app trace be useful too, as it seems
by 500 that it is not handling the (unanticipated?) access denial.

Roger

"SirCodesALot" <sjourdan@xxxxxxxxx> wrote in message
news:d3c3d690-948e-45f4-9af6-e8e6d8d32e20@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi All,

I am stuck and could use some help. For some reason, none of our
domain users can access our webpages unless they are added to the
Administrator group on the Web server and I can't figure out why. This
just started happening recently.

We have a local group called Users that conains our Domain Users.

Here is what I have done:

1. Checked that the users gruops has access to the Web Directory -
Users - yes
IIS_WFG - yes
System - yes
Administrators - yes
Users - yes

2. Checked the authentication method for the Website
- Integrated Windows Authentication

3. Looked at the logs for a persons not in the Adminstrators groups.
Here are a few lines:
2007-12-04 21:28:28 W3SVC1786339847 GET /ts/index.html - 80 - 401
1 0
2007-12-04 21:28:28 W3SVC1786339847 GET /ts/index.html - 80 - 500
0 2148074244

So it looks like it is failing because it can't validate the user and
only works if the user is in the admin group. Anyone have any idea
why?

Thanks in advance for your help!
-SJ




.

Relevant Pages

  • Re: Stumped by Authentication Problem
    ... Administrator group on the Web server and I can't figure out why. ... We have a local group called Users that conains our Domain Users. ... - Integrated Windows Authentication ...
    (microsoft.public.inetserver.iis.security)
  • Stumped by Authentication Problem
    ... Administrator group on the Web server and I can't figure out why. ... We have a local group called Users that conains our Domain Users. ... - Integrated Windows Authentication ...
    (microsoft.public.inetserver.iis.security)
  • RE: Stumped by Authentication Problem
    ... right on server security policy. ... Administrator group on the Web server and I can't figure out why. ... - Integrated Windows Authentication ...
    (microsoft.public.inetserver.iis.security)
  • Re: Get Windows User Name via ASP.NET
    ... once I move my web-site aspx files to the web server it returns ... Other browsers do not support Integrated Windows Authentication. ... Internet Explorer defaults to not sending the user identity if the server is not in the local intranet. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Give Domain Users Local Admin Rights
    ... > By adding a global group (Domain Users) to the local group, ... > Administrator group. ... We let thousands of users have full local admin priveleges, ... admin rights to install? ...
    (microsoft.public.windowsxp.security_admin)
Quantcast