|
Home > Archive > IIS Server Security > October 2004 > IIS6 - Anonymous Login browsing of website not working..
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS6 - Anonymous Login browsing of website not working..
|
|
| Graham Tapscott 2004-10-26, 5:50 pm |
| Seen alot asked about this problem but very few answers.
Have an IIS6 webserver that is bringing up a dialog box when users try to
access any webpage.
If I cancel out I get
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)
And the Event viewer shows..
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: IUSR_xxxxxx
Domain: XXXXXX
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: xxxxxx
Caller User Name: NETWORK SERVICE
Caller Domain: NT AUTHORITY
I have checked that the following is good.
NTFS permissions for IUSR
Registry Key permissions for IUSR
Anonymous Access Allowed in IIS Administration Tool
IUSR has login locally permissions and access computer remotely
I have uninstalled and reinstalled IIS6 and get the same error out of the box.
Only thing that seems to work is adding IUSR to the Administrators group.
Which isn't a valid solution ;)
Thanks much for any help,
Graham Tapscott
Sr. Web Systems Administrator
AIR
g_tapscott@hotmail.com
| |
| Showkat Lone [MSFT] 2004-10-26, 8:46 pm |
| Hi Graham,
If it is working by adding Iuser_ to administrators group, it's definitly a
permissions issue.
Follow this article to resolve this isseu
812614 Default permissions and user rights for IIS 6.0
http://support.microsoft.com/?id=812614
Thanks
Showkat [MSFT]
--------------------
>Thread-Topic: IIS6 - Anonymous Login browsing of website not working..
>thread-index: AcS7f1VypXaBq/q7TyCUm1+fj68jsQ==
>X-WBNR-Posting-Host: 208.246.68.146
>From: =?Utf-8?B?R3JhaGFtIFRhcHNjb3R0?= <Graham
Tapscott@discussions.microsoft.com>
>Subject: IIS6 - Anonymous Login browsing of website not working..
>Date: Tue, 26 Oct 2004 10:15:04 -0700
>Lines: 39
>Message-ID: <0EC955A1-A99A-463C-89FF-CD7682DE9E21@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.inetserver.iis.security
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: cpmsftngxa10.phx.gbl microsoft.public.inetserver.iis.security:15184
>X-Tomcat-NG: microsoft.public.inetserver.iis.security
>
>Seen alot asked about this problem but very few answers.
>
>Have an IIS6 webserver that is bringing up a dialog box when users try to
>access any webpage.
>
>If I cancel out I get
>HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.
>Internet Information Services (IIS)
>
>And the Event viewer shows..
>Logon Failure:
> Reason: User not allowed to logon at this computer
> User Name: IUSR_xxxxxx
> Domain: XXXXXX
> Logon Type: 8
> Logon Process: Advapi
> Authentication Package: Negotiate
> Workstation Name: xxxxxx
> Caller User Name: NETWORK SERVICE
> Caller Domain: NT AUTHORITY
>
>I have checked that the following is good.
>
>NTFS permissions for IUSR
>Registry Key permissions for IUSR
>Anonymous Access Allowed in IIS Administration Tool
>IUSR has login locally permissions and access computer remotely
>
>I have uninstalled and reinstalled IIS6 and get the same error out of the
box.
>Only thing that seems to work is adding IUSR to the Administrators group.
>Which isn't a valid solution ;)
>
>Thanks much for any help,
>
>Graham Tapscott
>Sr. Web Systems Administrator
>AIR
>g_tapscott@hotmail.com
>
>
| |
| David Wang [Msft] 2004-10-28, 7:48 am |
| This error also happens when you have:
1. IIS6 on a domain server
2. Integrated Authentication is used (i.e. Negotiate)
3. Custom AppPool Identity is used
Read this Documentation URL for the answer:
http://www.microsoft.com/resources/...rkridentity.asp
If you get the error out of the box, then the problem comes from your domain
and or its policies.
--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Graham Tapscott" <Graham Tapscott@discussions.microsoft.com> wrote in
message news:0EC955A1-A99A-463C-89FF-CD7682DE9E21@microsoft.com...
Seen alot asked about this problem but very few answers.
Have an IIS6 webserver that is bringing up a dialog box when users try to
access any webpage.
If I cancel out I get
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.
Internet Information Services (IIS)
And the Event viewer shows..
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: IUSR_xxxxxx
Domain: XXXXXX
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: xxxxxx
Caller User Name: NETWORK SERVICE
Caller Domain: NT AUTHORITY
I have checked that the following is good.
NTFS permissions for IUSR
Registry Key permissions for IUSR
Anonymous Access Allowed in IIS Administration Tool
IUSR has login locally permissions and access computer remotely
I have uninstalled and reinstalled IIS6 and get the same error out of the
box.
Only thing that seems to work is adding IUSR to the Administrators group.
Which isn't a valid solution ;)
Thanks much for any help,
Graham Tapscott
Sr. Web Systems Administrator
AIR
g_tapscott@hotmail.com
|
|
|
|
|