Re: Anonymous Access - NOTHING ABOUT IIS

From: Steven L Umbach (n9rou@attbi.com)
Date: 01/22/03 

From: "Steven L Umbach" <n9rou@attbi.com>
Date: Wed, 22 Jan 2003 13:00:58 GMT

    Here is a link that helped me understand it better. --- Steve

http://www.sans.org/rr/win/null.php

"Ondřej Ševeček" <ondrej.sevecek@centrum.cz> wrote in message
news:ePmTE5fwCHA.616@TK2MSFTNGP11...
> Hello,
> I don't understand the term "anonymous access" and the way one can reach
> this credentials on windows2000.
>
> I already know this:
>
> - built-in group "everyone" CONTAINS "anonymous user"
> - built-in group "authenticated users" DOESN'T CONTAIN "anonymous user"
> - "...\LSA\RestrictAnonymous" is registry key for disabling membership in
> "everyone" for "anonymous user"
> - there are some other GPO settings about "anonymous user" such as
"Disable
> anonymous access to registry keys", "Disable anonymous SAM enumeration",
...
>
> My question is:
>
> - when, why, where and which way one can gain this credentials and will
> therefore act as "anonymous user".
> - what services, programs, and systems use this method for access to
> resources.
> - how can one create program to impersonate with this credentials.
>
> Many thanks in advance.
> Ondrej Sevecek.
>
>
>
>

Relevant Pages

  • Re: Intermittent LDAP Table not found error
    ... In the security settings for the page under IISMGR I had set the credentials ... called from a page that runs under the user's security (anonymous access ... refresh or Ctrl-refresh don't help but if you HOLD DOWN F5 ...
    (microsoft.public.windows.server.scripting)
  • Re: credentials prompt accessing list anonymously
    ... Anonymous users, for those Lists, have been given the additional Add Items ... permission (in addition to the default Read permissions). ... All they they have by default in a site accessible by anonymous access ... Reader functionality without needing to give credentials. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Windows XP (IIS 5) and ASP.NET 2.0 Application?
    ... browse to the Virtual Directories under my IIS installation (that were setup ... even when supplying the correct credentials). ... Anonymous Access) and now I keep getting prompted for credentials every ... However, when I run Internet Explorer as "Administrator", I see my site ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: credentials prompt accessing list anonymously
    ... So in my opinion the credential prompt is still "surprising." ... I have discovered a bug with anonymous access on Portal server 2003. ... access without restarting IIS, but once the process restarts on its own, I'm ... Reader functionality without needing to give credentials. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: credentials prompt accessing list anonymously
    ... Even if you have given then Add functionality, they will still need to sign in to get it. ... So unless you have amended anonymous access so that anonymous people have Contributor rights, these people you have given add rights will still need to specify their name and password before being allowed to add anything. ... The workaround - can make it work like I want for a short time by disableing Anonymous access, restarting IIS and then enableing anonymous access without restarting IIS, but once the process restarts on its own, I'm back to square one. ... Reader functionality without needing to give credentials. ...
    (microsoft.public.sharepoint.windowsservices)