|
Home > Archive > IIS Server Security > October 2004 > IIS 6.0 Security - NTFS, Terminal & Windows Integrated
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS 6.0 Security - NTFS, Terminal & Windows Integrated
|
|
| Amihai Bareket 2004-10-25, 2:47 am |
| I'm having a problem when trying to configure security for web sites on IIS
6.0, which will be accessed from Internet Explorer through Windows Server
2003 Terminal Services.
This is what I've done -
Created a security groups on Active Directory (Win2k3 - Domain local)
Created a Directory and set NTFS permissions (full control) on the new
directory for the new group only.
Set up virtual directory on IIS pointing to the new directory.
Configured directory security on the virtual directory for Integrated
Windows Authentication.
I've logged on to Terminal Server using an account which is a member in the
new security group, and tried to access the new virtual directory on the web
server.
I keep getting prompted for a user name and password!
I've trying accessing the same site directly from a computer joined to that
domain, logged on with the same user account, and it worked fine - I was
able to access the site and wasn't prompt for a password.
What am I doing wrong?
| |
| Tom Kaminski [MVP] 2004-10-25, 7:49 am |
|
"Amihai Bareket" wrote:
> I'm having a problem when trying to configure security for web sites on IIS
> 6.0, which will be accessed from Internet Explorer through Windows Server
> 2003 Terminal Services.
> This is what I've done -
>
> Created a security groups on Active Directory (Win2k3 - Domain local)
> Created a Directory and set NTFS permissions (full control) on the new
> directory for the new group only.
> Set up virtual directory on IIS pointing to the new directory.
> Configured directory security on the virtual directory for Integrated
> Windows Authentication.
> I've logged on to Terminal Server using an account which is a member in the
> new security group, and tried to access the new virtual directory on the web
> server.
>
> I keep getting prompted for a user name and password!
>
> I've trying accessing the same site directly from a computer joined to that
> domain, logged on with the same user account, and it worked fine - I was
> able to access the site and wasn't prompt for a password.
>
> What am I doing wrong?
Could this be it?
http://support.microsoft.com/defaul...3&Product=ie600
| |
| Tom Kaminski [MVP] 2004-10-27, 5:52 pm |
| "Amihai Bareket" <amihai73@hotmail.com> wrote in message
news:exxVVsluEHA.2536@TK2MSFTNGP11.phx.gbl...
> I'm having a problem when trying to configure security for web sites on
> IIS
> 6.0, which will be accessed from Internet Explorer through Windows Server
> 2003 Terminal Services.
> This is what I've done -
>
> Created a security groups on Active Directory (Win2k3 - Domain local)
> Created a Directory and set NTFS permissions (full control) on the new
> directory for the new group only.
> Set up virtual directory on IIS pointing to the new directory.
> Configured directory security on the virtual directory for Integrated
> Windows Authentication.
> I've logged on to Terminal Server using an account which is a member in
> the
> new security group, and tried to access the new virtual directory on the
> web
> server.
>
> I keep getting prompted for a user name and password!
>
> I've trying accessing the same site directly from a computer joined to
> that
> domain, logged on with the same user account, and it worked fine - I was
> able to access the site and wasn't prompt for a password.
>
> What am I doing wrong?
First make sure this isn't the issue on the browser on the TS session:
http://support.microsoft.com/defaul...3&Product=ie600
--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsser...ty/centers/iis/
http://mvp.support.microsoft.com/
http://www.iisfaq.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://www.tryiis.com
|
|
|
|
|