Re: IISADMIN // IUSR_XP

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 10/18/03


Date: Sat, 18 Oct 2003 09:13:06 -0700

First, are you using the IIS webserver on your machine ?
If not, uninstall it in A/R Programs - Windows Components
within the networking options. It is just a vulnerability if
you are not using it and tending its security needs.
IISAdmin is the base services upon which all other parts
of an IIS install depend. Usually there is an account named
IIS_machinename used for anonymous browsers to webs on
the IIS webserver. Is your machine named XP ?
Are you sure the account does not exist? It will be masked
from displaying in some of the user interfaces.
At a cmd prompt try
net users
to see if it is listed.
If it is and you do want to run IIS then by your cited msgs
you need to enable it. However, before doing so, secure your
IIS - at a minimum by installing IIS Lockdown tool and then
updating URLscan to 2.5. You can find all of these by going
to the IIS security/checklist at microsoft.com/technet/security

An account can be enabled with
net user IUSR_XP /active:yes
or in advanced user interfaces like lusrmgr.msc

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"spookn" <anonymous@discussions.microsoft.com> wrote in message
news:087501c3957c$25a77280$a301280a@phx.gbl...
> what is:
> IISADMIN // IUSR_XP
> and what does it do?
>  I am getting an error in my event viewer (applications)
> "IISADMIN service found that account IUSR_XP is disabled.
> Some functions can fail for this reason.
>  IISADMIN is running in the services on automatic. I can
> not find IUSR_XP.
> thanks


Relevant Pages

  • Re: Removing the Intelligent Messaging Filter before upgrade to E2k3 S
    ... This sounds more like an IIS issue if we can't stop the service. ... IISAdmin set to start with the Local System Account? ... Microsoft Exchange Intelligent Message Filter -- Error 1921. ...
    (microsoft.public.exchange.setup)
  • RE: SOME Users cannot access OWA others do, error HTTP 500
    ... I understand that some account access OWA ... IIS 6.0 compression corruption causes access violations ... compressed copy of the affected files on the SBS server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 ASP: Which Process Identity Is It Using? App Pool or Anon?
    ... But isn't the COM object running under the ... The COM object can be running under the impersonated account, ... example, even if IIS launched the COM object with the impersonated user, the ... It will now be using "TestService" identity. ...
    (microsoft.public.inetserver.iis)
  • Re: Virtual Directory - Permission Denied with fso CopyFile
    ... TestUser (normal user account with same credentials on all machines). ... I logged into the IIS server as vdirUser and simply typed ... open and I had read and write permissions to the share. ... I logged off and back into the IIS server as the administrator and deleted ...
    (microsoft.public.inetserver.iis)

Quantcast