IIS Server Security - Anonymous Access denied

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2004 > Anonymous Access denied





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Anonymous Access denied
Nejmos Saqeb

2004-10-15, 9:25 pm

Hi,

I have site hosted under IIS 5.0 running on Windows 2000 Server w/SP4. The
site has a anonymous access allowed and "Everyone" access from ACL. Some of
the users are able to access the site whereas some dont.

What may be wrong?

Regards
Nejmos Saqeb
nejmos.saqib@softech.us






Bernard

2004-10-15, 9:25 pm

what's the status code ?
do you get login prompt ? using IE ?

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Nejmos Saqeb" <nejmos.saqib@softech.us> wrote in message
news:uhOqDJRsEHA.2516@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> I have site hosted under IIS 5.0 running on Windows 2000 Server w/SP4. The
> site has a anonymous access allowed and "Everyone" access from ACL. Some

of
> the users are able to access the site whereas some dont.
>
> What may be wrong?
>
> Regards
> Nejmos Saqeb
> nejmos.saqib@softech.us
>
>
>
>
>
>



Nejmos Saqeb

2004-10-15, 9:25 pm

Yes, I get the dialogue box asking for password in the IE. I've check
everything, Anonymous Access is allowed n 'IUSR_servername' has explicit
access too.

Please help.

Thanks
Nejmos Saqeb
Email: nejmos.saqib@softech.us



*** Sent via Developersdex http://www.codecomments.com ***
Don't just participate in USENET...get rewarded for it!
Bernard

2004-10-15, 9:25 pm

and do the iusr a/c has at least READ NTFS permission on the resource files
?

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Nejmos Saqeb" <nejmos.saqib@softech.us> wrote in message
news:O7ju$qasEHA.3872@TK2MSFTNGP15.phx.gbl...
> Yes, I get the dialogue box asking for password in the IE. I've check
> everything, Anonymous Access is allowed n 'IUSR_servername' has explicit
> access too.
>
> Please help.
>
> Thanks
> Nejmos Saqeb
> Email: nejmos.saqib@softech.us
>
>
>
> *** Sent via Developersdex http://www.codecomments.com ***
> Don't just participate in USENET...get rewarded for it!



Yogita Manghnani [MSFT]

2004-11-11, 5:52 pm

Hello,
It appears that you have both Anonymous and Integrated authentication
enabled. The reason you are being prompted is because Anonymous access is
failing and IIS is falling back on Integrated authentication
(http://support.microsoft.com/defaul...kb;en-us;264921) . With
Integrated auth, if there are periods in the URL, the IE assumes its an
external URL and will prompt you for domain, user and password
(http://support.microsoft.com/defaul...kb;en-us;303650).

To find out why Anonymous is failing, you have to first disable Integrated
authentication and make sure that Anonymous authentication is the only
method. Then in IE-> Tools-> Internet Options-> Advanced-> uncheck the Show
friendly http error messages option. Reopen the browser and browse the
site. What's the http error code you are seeing now?
Look in http://support.microsoft.com/defaul...kb;en-us;318380 for
the various error codes and their meanings.

I'd recommend that you run the tool Authdiag to find out what is causing
anonymous access to fail
http://www.microsoft.com/downloads/...e777-4a21-4066-
bd22-b931f7572e9a&DisplayLang=en

Good luck,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

****************************************
*****************************[vbcol=seag
reen]
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
****************************************
*****************************

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com