Re: Securing IIS

From: Roger Abell (abell@asu.edu)
Date: 03/17/03 

From: "Roger Abell" <abell@asu.edu>
Date: Mon, 17 Mar 2003 06:26:38 -0700

Those IUSR_ and IWAM_ were used to indicate the
accounts used by IIS. If your install is in a default
configuration there will be one of each of them, ending
in the name of your machine.

You should try a newsreader client, Outlook Express is
free but somewhat reduced in function and now unreliable
after the last IE roll-up. But it works and is free. There
are many other newsreader clients - any one of which is
more convenient than trying to use the web interface today. 

-- 
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Peter Hall" <forums@peterjoel.co.uk> wrote in message news:045f01c2eb7d$6cbe10b0$3001280a@phx.gbl...
> I think you are going to have to explain what are IUSR_ 
> and IWAM_?
> 
> btw, is there a way to bookmark threads in this forum? 
> (or view it in a newsreader?) I'm finding it hard to keep 
> up with this one thread, and I'm sure you wouldn't be 
> here, answering questions every day if its as difficult 
> to use as it seems...
> 
> 
> >-----Original Message-----
> >If according to IIS the web is set to allow anonymous 
> >access, but you are being prompted for and account and 
> >its password, this is usually due to the IUSR_ account 
> not 
> >having permission on some file that the browsing action 
> >triggers an attempt to access.  It may be the IWAM_ that 
> >is lacking the permissions, depending on the process 
> >model being used. 
> >
> >-- 
> >Roger 
> >

Relevant Pages

  • Re: Anonymous Account not working
    ... the Iusr_ you are using may have been defined before the final ... IIS install on that box. ... I think the problem may be with the local account. ... built the server there was another server that was named WEB02, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IWAM out of sync (DCOM error) 10004
    ... password that is cached in the IIS Metabase for the IWAM and IUSR accounts. ... This should show you whether the password is being changed in the metabase. ... If you reset the password on the domain account, ... and IIS is set to control the IUSR password? ...
    (microsoft.public.inetserver.iis.security)
  • Re: IWAM Out of sync
    ... IWAM password, shouldn´t we run the SYNCIWAM.Vbs script from Adminscripts ... I think I did this the last time: Change Password on account, ... > on my computer or IIS web server, or the account keeps getting locked out. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IUSR_<machine_name> Default Group Membership
    ... Stop IIS ... Set the default IIS/IWAM anonymous account password. ... replace the x's with the IWAM user name! ... Microsoft Exchange 2000 between October 1 and November 16. ...
    (NT-Bugtraq)
  • Re: Experiencing Sporadic HTTP Error 401.1 - Unauthorized errors on IIS
    ... I created a user identical to IUSR and set this user as the anonymous user ... account in IIS Web Sites. ... All web sites and web pages now return 401.1. ... Access to all IIS resources ...
    (microsoft.public.inetserver.iis)
Loading