Re: Access Denined

From: Steve (scgarrett@dslextreme.com)
Date: 04/24/03 

From: "Steve" <scgarrett@dslextreme.com>
Date: Thu, 24 Apr 2003 11:50:04 -0700

I placed file security on the htm file by going into
properties of the file and selecting the Security tab and
removed 'Everyone' and added Administrator and UserXX. I
provided Read and Read and Execute privilages to UserXX.
Now it appears if a user has stored userID and Password
in Cache memory, they are not even giving the logon
screen to enter the required userID and Password....they
just get a Access Denined message. Users who don't logon
to their ISP, receive a logon window asking for UserID
and Password. Once they provide that info, everything
works fine. Is their some setting on the server to force
this logon window to the users who have cached logon info?
Thanks for responding!
>-----Original Message-----
>Ok, first not enough of the right info.
>When you say "place security on a particular section", I
assume this refers
>to the security in IIS? Try setting NTFS permissions on
the folder.
>Also look into https:// (note S for secure) you will
have to get a
>certificate for your server.
>But setting the NTFS permissions should do what you want.
>
>--
>Yor Suiris
>Remove "NOT' to reply.
>But it is best to reply to the group so everyone can
share.
>Even if it makes me look stupid, others could use a
laugh.
>
>"Steve" <scgarrett@dslextreme.com> wrote in message
>news:00e801c309cd$c1d0d420$a501280a@phx.gbl...
>> I have a question regarding file security on my web
>> server. I have place security on a particular section
of
>> my server.... http://www.scrcav.com. In the top menu
you
>> will see a private area. Within this section, I list
all
>> of the personal information about my members. The
>> members who want to list their telephone numbers and
such
>> I have listed here. I place security on this file so
>> outsiders can't see the info. I created a userID and a
>> password to access this area, and I shared this
>> information with everyone.
>>
>> Now here is the problem.....the users who have access
to
>> the internet without logging on to their provider, can
>> access the file without any problems.....the users who
>> have to logon to their provider (such as AOL) can't
>> access the file because the system uses their logon ID
>> and password and the security fails to let them in.
Any
>> ideas without me creating many userIDs on the server
>> using their passwords?
>>
>
>
>.
>

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: FOR A SKILLED IT EXPERT - WIN2K SERVER - DOMAIN CONTROLLER
    ... Windows Server 2003 one can, but not from a safe mode boot). ... boots up on cached profile only) The interactive logon problem has applied ... manual security reset. ... If you had not tried the reset we could have pulled you out of this, ...
    (microsoft.public.win2000.security)
  • Re: Unknown Domain user - domain authentication appears limited
    ... (using cached login). ... Microsoft MVP (Windows Server System: Security) ... > due to the following error: Logon failure: the user has not been granted ...
    (microsoft.public.windows.server.security)
  • Re: Users no longer authenticate on W2k-svr
    ... Policy and go to security settings/local policies/user rights and make sure ... auditing of logon events on that server and then view the logs in Event Viewer ...
    (microsoft.public.win2000.networking)
  • Re: Help with Security Logs
    ... Security" means that the event was generated by the security ... Primary User is the user context that actually performed the access; ... Client User is the user on behalf of whom the file was accessed. ... The Logon ID fields for Primary User and Client User identify a unique logon ...
    (microsoft.public.security)