Re: Event log access rights on Windows 2003

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/26/04

  • Next message: Klaus: "sftp upload to Windows 2003 EFS directory fails (using public key authentication)"
    Date: Sat, 26 Jun 2004 02:52:33 -0700
    
    

    Yes, there is a great deal of difference between IIS 5 and 6
    in this regard. You might find advantage in examining some
    of the upgrade docs for IIS to see how the backend process
    model was rearchitected and is instanced in new accounts.

    -- 
    Roger Abell
    Microsoft MVP (Windows Server System: Security)
    MCSE (W2k3,W2k,Nt4)  MCDBA
    "Crusty Applesniffer" <CrustyApplesniffer@nospam.org> wrote in message
    news:ef5tlcsWEHA.2576@TK2MSFTNGP10.phx.gbl...
    > Hello,
    >
    > I have a COM object which allows an asp page reading a user defined event
    > log (the account used to access the event log is the connected user's
    one.)
    >
    > When I store the page on IIS on a W2000 server, I can use it whathever
    user
    > account I use.
    > But if I store the page on IIS on w Windows 2003 server I get on error
    > (Access denied) when I open the asp page with a user that does not belong
    to
    > Domain Admins group.
    >
    > I want to know if there is a difference (in a security point of view)
    > between IIS on Windows 2003 and IIS on Windows 2000.
    >
    > Thank you.
    >
    >
    >
    

  • Next message: Klaus: "sftp upload to Windows 2003 EFS directory fails (using public key authentication)"

    Relevant Pages

    • RE: SOME Users cannot access OWA others do, error HTTP 500
      ... I understand that some account access OWA ... IIS 6.0 compression corruption causes access violations ... compressed copy of the affected files on the SBS server: ...
      (microsoft.public.windows.server.sbs)
    • Re: Not associated with a trusted SQL Server connection
      ... is that because you have checked "Integrated Windows Authentication", IIS ... use the windows account of the logged user to connect to the SQL-Server ... a new web server that is running under Windows 2003 Server. ...
      (microsoft.public.sqlserver.connect)
    • Re: IIS Start up errors
      ... provide the detailed steps to reinstall the IIS server in SBS 2003 server. ... For example, programs such as Microsoft ... In the Currently installed programs list, click Windows Small Business ...
      (microsoft.public.windows.server.sbs)
    • Re: Not associated with a trusted SQL Server connection
      ... Just to add, if you are now on a Windows Server 2003, your IIS account would be defined by your application pool. ... One possibility is that because you have checked "Integrated Windows Authentication", IIS use the windows account of the logged user to connect to the SQL-Server instead of using its own IUSER_MachineName account. ...
      (microsoft.public.sqlserver.connect)
    • Re: Virtual Directory - Permission Denied with fso CopyFile
      ... TestUser (normal user account with same credentials on all machines). ... I logged into the IIS server as vdirUser and simply typed ... open and I had read and write permissions to the share. ... I logged off and back into the IIS server as the administrator and deleted ...
      (microsoft.public.inetserver.iis)