IIS Server - Setting Authorisation

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server > November 2004 > Setting Authorisation





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Setting Authorisation
Junkyard Engineer

2004-11-24, 6:26 pm

I have IIS5.1 and on my website, I published my Outlook calendar. I don't
want everybody to access my calendar.

Somehow, in FP2003, I can't set the security of individual website or html
page.

So I thought to set the security access via IIS console. I open MMC and
navigate to my cal.htm. I click Authorisation Assistant. Then I set it to
be secure access using windows account.

When I'm trying to access it, it ask me a username/password. I give my admin
account and the access is blocked.

Is there something else I have to do ?


Bernard

2004-11-25, 2:50 am

and does the so called 'admin account' have at least READ NTFS permission on
the cal.htm ?

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Junkyard Engineer" <jackeric@engineer.com> wrote in message
news:O7zzhul0EHA.2040@tk2msftngp13.phx.gbl...
> I have IIS5.1 and on my website, I published my Outlook calendar. I don't
> want everybody to access my calendar.
>
> Somehow, in FP2003, I can't set the security of individual website or html
> page.
>
> So I thought to set the security access via IIS console. I open MMC and
> navigate to my cal.htm. I click Authorisation Assistant. Then I set it to
> be secure access using windows account.
>
> When I'm trying to access it, it ask me a username/password. I give my

admin
> account and the access is blocked.
>
> Is there something else I have to do ?
>
>



Junkyard Engineer

2004-11-25, 7:50 am

yes, I have extended the security tab view in windows explorer. Clicked on
inetpub/wwwroot/cal.htm and in the security tab, I have 4 users :
administrators, everybody, me and my wife (both have administrative accounts
in winXPpro).

Went into Advanced parameters and made sure that administrative accouns have
total control.

Went back into IIS MMC, right click on cal.htm, authorisation set to secure
website
left click on cal.htm and File security, unchecked anonymous access. Windows
integrated verification is checked.

I don't know where to look now.


"Bernard" <qbernard@hotmail.com.discuss> a écrit dans le message de news:
uxYFINr0EHA.3616@TK2MSFTNGP11.phx.gbl...
> and does the so called 'admin account' have at least READ NTFS permission
> on
> the cal.htm ?
>
> --
> Regards,
> Bernard Cheah
> http://www.tryiis.com/
> http://support.microsoft.com/
> http://www.msmvps.com/bernard/
>
>
>
> "Junkyard Engineer" <jackeric@engineer.com> wrote in message
> news:O7zzhul0EHA.2040@tk2msftngp13.phx.gbl...
> admin
>
>



Junkyard Engineer

2004-11-25, 5:53 pm

Ok, found it. For reference to others, here's how to do it

1. Visit this link http://support.microsoft.com/kb/299970/en-us. The main
thing is to put all pages that you want to protect in one folder in your
website directory structure. I've put mines in "Private Access". That's the
easy part.

2. If you do that alone, it doesn't work so, the KB article is misleading or
erroneous. Now, open IIS console. Navigate to the new directory (obviously,
you already published your website) and right click on it and choose
Properties. Click on Security Tab and Modify button. Make sure that
Anonymous access is UNCHECKED and that Integrated Windows Authentification
is UNCHECKED at the bottom. ONLY Basic Authentification should be CHECKED

That's it. Keep this for reference somewhere because like me, you will
forget about it.




"Bernard" <qbernard@hotmail.com.discuss> a écrit dans le message de news:
uxYFINr0EHA.3616@TK2MSFTNGP11.phx.gbl...
> and does the so called 'admin account' have at least READ NTFS permission
> on
> the cal.htm ?
>
> --
> Regards,
> Bernard Cheah
> http://www.tryiis.com/
> http://support.microsoft.com/
> http://www.msmvps.com/bernard/
>
>
>
> "Junkyard Engineer" <jackeric@engineer.com> wrote in message
> news:O7zzhul0EHA.2040@tk2msftngp13.phx.gbl...
> admin
>
>



Bernard

2004-11-29, 2:48 am

if both basic and integrated are checked, IIS will not fall back to basic
auth if Kerberos or NTLM in IWA failed. Hence, IWA is not recommended for
Internet app based. More detail...
INFO: How IIS Authenticates Browser Clients
http://support.microsoft.com/?id=264921

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Junkyard Engineer" <jackeric@engineer.com> wrote in message
news:JWmpd.10021$eJ.70006@wagner.videotron.net...
> Ok, found it. For reference to others, here's how to do it
>
> 1. Visit this link http://support.microsoft.com/kb/299970/en-us. The main
> thing is to put all pages that you want to protect in one folder in your
> website directory structure. I've put mines in "Private Access". That's

the
> easy part.
>
> 2. If you do that alone, it doesn't work so, the KB article is misleading

or
> erroneous. Now, open IIS console. Navigate to the new directory

(obviously,
> you already published your website) and right click on it and choose
> Properties. Click on Security Tab and Modify button. Make sure that
> Anonymous access is UNCHECKED and that Integrated Windows Authentification
> is UNCHECKED at the bottom. ONLY Basic Authentification should be CHECKED
>
> That's it. Keep this for reference somewhere because like me, you will
> forget about it.
>
>
>
>
> "Bernard" <qbernard@hotmail.com.discuss> a écrit dans le message de news:
> uxYFINr0EHA.3616@TK2MSFTNGP11.phx.gbl...
permission[vbcol=seagreen]
don't[vbcol=seagreen]
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com