Re: IIS Lockdown tool Question

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 06/21/05 

Date: Tue, 21 Jun 2005 11:09:41 GMT

On Mon, 20 Jun 2005 09:16:54 +0700, Peter Kaufman
<pmkdatabase_at_yahoo_dot_ca> wrote:

>The lockdown tool is breaking a 3rd party indexing and searching
>software (DTSearch) and I cannot figure out why. It seems like it is
>an execute permissions thing, but the permissions look correct.
>
>Is there any way to log or check *everything* this tool does including
>where and to what permissions are changed?

Two possibilities. First is URLScan. Check the URLScan logs for
details on what it's been blocking. The second is permissions. Rerun
the lockdown tool to undo all the changes it made. Then run it again,
this time paying attention to the options you select. Check the IIS
group for more details.

Jeff

Relevant Pages

  • IIS Lockdown tool Question
    ... The lockdown tool is breaking a 3rd party indexing and searching ... software (DTSearch) and I cannot figure out why. ... an execute permissions thing, ...
    (microsoft.public.win2000.security)
  • Re: sa privileges and roles
    ... permissions of that account. ... Another option is to create a dbo-owned user proc in an sa-owned user ... in your user database and grant execute permissions only on your user proc. ... SQL Server MVP ...
    (microsoft.public.sqlserver.programming)
  • Re: wshShell.Run - permission denied
    ... cmd.exe to ensure that the IUSR_CPUNAME and IWAM_CPUNAME accounts have ... dim WshShell, retCode ... should have at least read and execute permissions to the CSCRIPT.exe ...
    (microsoft.public.scripting.wsh)
  • Re: Need for default umask
    ... permissions would presumably be expected to do something like: ... instance, if you're saving a script from a text editor, you'd like it to ... but it's unlikely that you would need to turn ON execute permissions as ...
    (comp.unix.internals)
  • Re: Problem with Performance Monitor Alerts and "Run As" command
    ... If it runs as an admin then there must be a permissions problem. ... First check that the account has read and execute permissions to the ... script that you are running, and also that BATCH has permissions to ... When creating the Performance Alert and this user is put into Administrators ...
    (microsoft.public.windows.server.general)