IIS Server Security - SubDirectory Anonymous Permissions

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2004 > SubDirectory Anonymous Permissions





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author SubDirectory Anonymous Permissions
Janet

2004-09-22, 9:26 pm

In IIS4, I had a subdirectory that restricted access to
one user account requiring login/pwd; but under that,
another subdirectory that gave permission back to the
anonymous account not requiring login/pwd.

I can't get this to work in IIS6. I've checked directory
permission in IIS and made sure the child inherited
permissions were okay on server2003.

Any ideas?
JB
Ken Schaefer

2004-11-21, 7:47 am

a) You should disable "Allow anonymous authentication" for the parent folder
and set appropriate NTFS file-based permissions for that folder

b) You should then allow "Allow anonymous authentication" for the child
folder and allow the IUSR_<machinename> (or the configured anonymous user
account) appropriate Read NTFS permissions.

Cheers
Ken


"Janet" <janetb@mtn.ncahec.org> wrote in message
news:187101c4a0b8$d5f275c0$a601280a@phx.gbl...
> In IIS4, I had a subdirectory that restricted access to
> one user account requiring login/pwd; but under that,
> another subdirectory that gave permission back to the
> anonymous account not requiring login/pwd.
>
> I can't get this to work in IIS6. I've checked directory
> permission in IIS and made sure the child inherited
> permissions were okay on server2003.
>
> Any ideas?
> JB



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com