IIS Server Security - How do I setup the IWAM Account

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2004 > How do I setup the IWAM Account





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How do I setup the IWAM Account
=?Utf-8?B?S2VuIFNueWRlcg==?=

2004-01-24, 1:55 am

Our security policy requires that I remove the IWAM_ComputerName account and replace it with a new account. I have deleted the system account and modified the registry so that it is not recreated and I have created the new account. Now how do I tell IIS
that this is my new IWAM account? Any help would be appreciated.

Thanks,
Ken Snyder
Karl Levinson [x y] mvp

2004-01-24, 1:55 am

Believe part of this is through the ADSUTIL.VBS command. Try searching
www.google.com and www.google.com/advanced_group_search for "IWAM
ADSUTIL.VBS" and/or IWAM ADSUTIL" www.iisfaq.com might have the information
as well.


"Ken Snyder" <ksnyder@orkand.com> wrote in message
news:D150C9A1-3AF4-49AE-BC3E-85E5E08BC6E4@microsoft.com...
quote:

> Our security policy requires that I remove the IWAM_ComputerName account


and replace it with a new account. I have deleted the system account and
modified the registry so that it is not recreated and I have created the new
account. Now how do I tell IIS that this is my new IWAM account? Any help
would be appreciated.
quote:

>
> Thanks,
> Ken Snyder




Paul Lynch

2004-01-24, 1:55 am

On Fri, 5 Dec 2003 14:51:05 -0800, "Ken Snyder" <ksnyder@orkand.com>
wrote:
quote:

>Our security policy requires that I remove the IWAM_ComputerName account and replace it with a new account. I have deleted the system account and modified the registry so that it is not recreated and I have created the new account. Now how do I tell II


S that this is my new IWAM account? Any help would be appreciated.
quote:

>
>Thanks,
>Ken Snyder



Ken,

This article should do the trick :

How can I change the IWAM_xxxx user account and password?
http://www.iisfaq.com/?View=A324

You can also change the IUSR_ account to something less obvious. We do
this as a matter of course.


Regards,

Paul Lynch
MCSE
Christopher Haun

2004-01-24, 1:55 am


I expect that if you examine one of these three KB articles, you can focus
on the word IWAM and see what all needs to happen to the replacement
account.
This covers NTFS permissions on the content and local security policy
permissions. I don't think that these cover what you might have to do if
you're going to be using Com+ packages that by default use the Iwam
account--but this may not affect you.


187506 INFO: Basic NTFS Permissions for IIS 4.0
http://support.microsoft.com/?id=187506



271071 HOW TO: Set Basic NTFS Permissions for IIS 5.0
http://support.microsoft.com/?id=271071



812614 INFO: Default Permissions and User Rights for IIS 6.0
http://support.microsoft.com/?id=812614


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com