Re: deny access to IIS virtual directory

From: S. Pidgorny (slavickp_at_yahoo.com)
Date: 02/22/05 

Date: Tue, 22 Feb 2005 13:40:35 +1100

Nope, the user has legitimate access: if anonymous access is enabled, it is
used by default - and NTFS premissions of the anonymous Internet user
account (IUSR_SERVERNAME) apply. 

-- 
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-
"David K" <noemail@nospam.com> wrote in message
news:v25l11dl80itqhqo5fns9kouqmq5ffiuc5@4ax.com...
> I'm running Windows Server 2003.
>
> On the IIS server, I have the local path c:\intranetnews shared as a
> virtual directory for the active website.
>
> I have anonymous access enabled for the directory, so that users
> aren't prompted for credentials. One global security group, Project
> Contractors, is denied access to that directory via NTFS permissions.
> Every user can open that portion of the site in IE, including Jay
> Adams, who is a member of Project Contractors. Why?
>
> All I can figure is Jay is being treated as an anonymous user instead
> of his logon credentials.
>
> If that's the case, the MSPress MCSE book is wrong. This is part of an
> exercise that says that given this configuration, Jay should be denied
> access.
>
> Thanks,
> Dave