Re: IIS Lockdown tool Question

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/20/05 

Date: Mon, 20 Jun 2005 00:22:23 -0700

IISlockdown only changes permissions using two groups that
it defines, something like Web Anonymous Users, and Web
Applications. If you want to reverse the permissions changes
you would only need to adjust the memberships of those groups,
as a test to see if that is the issue, and then use such as iisreset
to make sure the accounts get forced to re-authenticate.
Have you reviewed the extensions disallowed relative to
those used to post to your custom indexing/searching ?
(i.e. anything showing in the urlscan log file?) 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
"Peter Kaufman" <pmkdatabase_at_yahoo_dot_ca> wrote in message
news:0j9cb11qbgj4481km4k2rjtjluf8cju0cj@4ax.com...
> Hi,
>
> The lockdown tool is breaking a 3rd party indexing and searching
> software (DTSearch) and I cannot figure out why. It seems like it is
> an execute permissions thing, but the permissions look correct.
>
> Is there any way to log or check *everything* this tool does including
> where  and to what permissions are changed?
>
> Thank you,
>
> Peter

Relevant Pages

  • IIS Security - some advice please
    ... The permissions for the each directory are the same and they are as follows: ... Allow: Read Execute ... Web Anonymous Users: ... Deny: Write ...
    (microsoft.public.win2000.security)
  • Re: Remote Anonymous Access Lost with IISLockdown
    ... All permissions were working correctly prior to installing the lockdown tool ... The remote server is set up correctly to allow anonymous access. ...
    (microsoft.public.inetserver.iis.security)
  • Re: URLScan and an EXE File
    ... Having just screwed up my Frontpage extensions for the ... Seriously, I didn't mess them up by myself, the lockdown tool or UrlScan ... The reason I am GOOD with permissions is from YEARS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Public folder permissions - messed up by IIS Lockdown tool
    ... > I ran the latest version of the IIS Lockdown tool against my Exchange ... > permissions on the M: drive, something we've all been warned not to do. ... > I found myself essentially locked out of all public folders at that point. ... One particular folder subtree is causing problems, ...
    (microsoft.public.exchange2000.admin)
  • Lockdown tool
    ... I have run the Microsoft lockdown tool to secure our web server. ... We have an asp script that is called from our online payment ... The permissions within IIS shows the following: ... I am presuming the lockdown tool has set these permissions at a lower level. ...
    (microsoft.public.windows.server.general)