IIS Server Security - Win 2K3, IIS6.0 Config

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > February 2004 > Win 2K3, IIS6.0 Config





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Win 2K3, IIS6.0 Config
John H

2004-02-26, 6:34 am

I couldn't find one, but please direct me if a similar
thread / group already exists.

I am trying to configure an intranet site on a Win 2K3
server running IIS 6.0 and server extensions 2002. The
site works fine, but I cannot configure the permissions
in IIS as required.
The desired situation is this. Only users from a specific
department can view the site (presumably done using NTFS
permissions). Using Windows integrated or digest
authentication, so that allowed users do not have to
enter a username or password each time they visit the
site. If I try and configure this, I get it horribly
wrong. Users either get access denied error or are
prompted for a password to the box itself.
I have the site working perfectly on my laptop, running
XP, IIS 5.1 and extensions 2002, but cannot configure the
new server. Please help!

TIA

John
Tom Kaminski [MVP]

2004-02-26, 9:34 am

"John H" <anonymous@discussions.microsoft.com> wrote in message
news:20d001c3fc57$8e66c540$a001280a@phx.gbl...
> I couldn't find one, but please direct me if a similar
> thread / group already exists.
>
> I am trying to configure an intranet site on a Win 2K3
> server running IIS 6.0 and server extensions 2002. The
> site works fine, but I cannot configure the permissions
> in IIS as required.
> The desired situation is this. Only users from a specific
> department can view the site (presumably done using NTFS
> permissions). Using Windows integrated or digest
> authentication, so that allowed users do not have to
> enter a username or password each time they visit the
> site. If I try and configure this, I get it horribly
> wrong. Users either get access denied error or are
> prompted for a password to the box itself.
> I have the site working perfectly on my laptop, running
> XP, IIS 5.1 and extensions 2002, but cannot configure the
> new server. Please help!


Most likely an IE issue. In IE, Go to Tools -> Internet Options ->
Security -> Custom Level -> User Authentication -> Logon and make sure it's
not prompting for intranet use. You can also add your domain or IP to the
no proxy setting to get IE to recognize it as the intranet. Tools ->
Internet Options -> Connections -> LAN Settings -> Advanced.

In security configuration you need to go Tools > Internet Options > Security
> Local intranet > Sites... > Advanced > Add this web site or IP to the

zone.

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsser...ty/centers/iis/



2004-02-26, 10:34 am

>-----Original Message-----
>"John H" <anonymous@discussions.microsoft.com> wrote in

message
>news:20d001c3fc57$8e66c540$a001280a@phx.gbl...
specific[color=darkred]
NTFS[color=darkred]
the[color=darkred]
>
>Most likely an IE issue. In IE, Go to Tools -> Internet

Options ->
>Security -> Custom Level -> User Authentication -> Logon

and make sure it's
>not prompting for intranet use. You can also add your

domain or IP to the
>no proxy setting to get IE to recognize it as the

intranet. Tools ->
>Internet Options -> Connections -> LAN Settings ->

Advanced.
>
>In security configuration you need to go Tools >

Internet Options > Security
site or IP to the[color=darkred]
>zone.
>
>--
>Tom Kaminski IIS MVP
>http://www.iistoolshed.com/ - tools, scripts, and

utilities for running IIS
>http://mvp.support.microsoft.com/
>http://www.microsoft.com/windowsser.../community/cent

ers/iis/


Thanks, Tom- that solved most of the problems I was
experiencing. I can browse the site without entering a
username etc, and forms are automatically populated with
the correct username. However, I'm still being asked for
a password for the box whenever I use the FP upload
feature to upload a file to the web site. Is this still
to do with permissions / security; Any ideas?

Thanks,

John.
Tom Kaminski [MVP]

2004-02-26, 11:34 am

<anonymous@discussions.microsoft.com> wrote in message
news:275601c3fc7b$ed33fc90$a101280a@phx.gbl...
> Thanks, Tom- that solved most of the problems I was
> experiencing. I can browse the site without entering a
> username etc, and forms are automatically populated with
> the correct username. However, I'm still being asked for
> a password for the box whenever I use the FP upload
> feature to upload a file to the web site. Is this still
> to do with permissions / security; Any ideas?


I'm not sure what you mean by the "FP Upload feature".

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsser...ty/centers/iis/



2004-02-26, 11:34 am


>-----Original Message-----
><anonymous@discussions.microsoft.com> wrote in message
>news:275601c3fc7b$ed33fc90$a101280a@phx.gbl...
with[color=darkred]
for[color=darkred]
>
>I'm not sure what you mean by the "FP Upload feature".
>
>--
>Tom Kaminski IIS MVP
>http://www.iistoolshed.com/ - tools, scripts, and

utilities for running IIS
>http://mvp.support.microsoft.com/
>http://www.microsoft.com/windowsser.../community/cent

ers/iis/
>
>


Sorry - FrontPage File Upload Component for sending files
to the web via a web form.
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com