IIS Server Security - Re: Anonymouse access causes Unauthorized Access error

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2004 > Re: Anonymouse access causes Unauthorized Access error





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Re: Anonymouse access causes Unauthorized Access error
Barry Fitzgerald

2004-01-24, 1:54 am

Hi Wei-Dong,

Or should it just be Wei?

I did not see anything in the logs that seems to have anything to do with
this. This is not on a domain controller. There are no other servers othe
than IIS running on this server. Are there any policy settings in Win 2003
serverthat could prevent anonymous access.?

--
Barry Fitzgerald


"Wei-Dong Xu [MSFT]" <v-wdxu@online.microsoft.com> wrote in message
news:H$0RdtxsDHA.2972@cpmsftngxa07.phx.gbl...
quote:

> Hi Barry,
>
> From my experience, you can check the IIS log and event viewer to see


whether there is any related error information regarding this issue. The IIS
quote:

> log is located at: %windir%\system32\logfiles. You can type


"eventvwr"(without quotation) in start->run to start the event viewer. If
you find any, it
quote:

> will be appreciated that you post them in the newsgroup.
>
> I am not sure whether your windows 2003 server is a domain controller. It


is not recommended you install IIS in one domain controller for the secure.
quote:

> If the hackers break the IIS, the attackers will obtain all the domain


information very easily. Furthermore, there is one kb article which
introduces
quote:

> more information about IIS in the domain controller . Please go to:
> 263140 Anonymous and Basic Authentication Fail When You Connect to IIS 5.0


on a
quote:

> http://support.microsoft.com/?id=263140
>
> It is also appreciated you tell me whether there is some other servers


installed in the box, for example Exchange.
quote:

>
> Please feel free to let me know if you have any questions.
>
> Does this answer your question? Thank you for using Microsoft NewsGroup!
>
> Wei-Dong Xu
> Microsoft Product Support Services
> Get Secure! - www.microsoft.com/security
> This posting is provided "AS IS" with no warranties, and confers no


rights.
quote:

>
>




Wei-Dong Xu [MSFT]

2004-01-24, 1:54 am

Hi Barry,

Thank you for replying!

From my understanding to your issue now, I'd suggest you can set one domain account in the direct security tab for anonymous access, for example,
the administrator account. This way, if you can access the default web site anonymously, you can then specify one account with less permission
than administartor for troubleshooting.

Please feel free to let me know if you have any further questions.

Does this answer your question? Thank you for using Microsoft NewsGroup!

Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.



Barry Fitzgerald

2004-01-24, 1:54 am

Thanks Wei-Dong. I was able to find it. Someone had messed with some
directory permissions that I had not noticed before. This was also being
compounded by the ISP who had changed their routers to something that was
incompatible with the h/w firewall.

--
Barry Fitzgerald


"Wei-Dong Xu [MSFT]" <v-wdxu@online.microsoft.com> wrote in message
news:b5AJED#sDHA.3428@cpmsftngxa07.phx.gbl...
quote:

> Hi Barry,
>
> Thank you for replying!
>
> From my understanding to your issue now, I'd suggest you can set one


domain account in the direct security tab for anonymous access, for example,
quote:

> the administrator account. This way, if you can access the default web


site anonymously, you can then specify one account with less permission
quote:

> than administartor for troubleshooting.
>
> Please feel free to let me know if you have any further questions.
>
> Does this answer your question? Thank you for using Microsoft NewsGroup!
>
> Wei-Dong Xu
> Microsoft Product Support Services
> Get Secure! - www.microsoft.com/security
> This posting is provided "AS IS" with no warranties, and confers no


rights.
quote:

>
>
>




Wei-Dong Xu [MSFT]

2004-01-24, 1:54 am

Hi Barry,

Thank you for replying!

You are very welcome!

Thank you once more for using Microsoft NewsGroup!

Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.


Bala Bish

2004-01-24, 1:55 am


Hi Barry,

Can you please tell me what were the directory settings. I am having the
same problem like yours.

Regds,
Bala


*** Sent via Developersdex http://www.examnotes.net ***
Don't just participate in USENET...get rewarded for it!
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com