IIS Server Security - IIS 6.0 promps for username and password

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > September 2004 > IIS 6.0 promps for username and password





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS 6.0 promps for username and password
Kevin Wheeler

2004-09-15, 10:34 am

I have an IIS 6.0 webserver. When I browse to the webpage, it prompts me
for a username and password. What is causing this? Is there something
within the local security settings that I should check?


Miha Pihler

2004-09-15, 10:34 am

Hi Kevin,

What would you like to achieve? Anonymous access or Integrated Windows
Authentication?

Mike

"Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
news:u%23fPt$mmEHA.3428@TK2MSFTNGP11.phx.gbl...
> I have an IIS 6.0 webserver. When I browse to the webpage, it prompts me
> for a username and password. What is causing this? Is there something
> within the local security settings that I should check?
>
>



Kevin Wheeler

2004-09-15, 10:34 am

I would like to achieve Anonymous access. user should be able to access the
webpages without having a local account on the webserver.
"Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:eRYGuBnmEHA.512@TK2MSFTNGP10.phx.gbl...
> Hi Kevin,
>
> What would you like to achieve? Anonymous access or Integrated Windows
> Authentication?
>
> Mike
>
> "Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
> news:u%23fPt$mmEHA.3428@TK2MSFTNGP11.phx.gbl...
me[vbcol=seagreen]
>
>



Miha Pihler

2004-09-15, 10:34 am

On your website properties under Directory Security tab click on first Edit
button (button under Authentication and access control). Make sure that
"Enable Anonymous access" is selected here. Also note the account that is in
the list (IUSER_<Server_Name> ).

Make sure that this account (IUSER_<Server_Name> has read permissions (and
only read) on NTFS where your website content is. IIS will honor NTFS
permissions.

I hope this helps,

Mike

"Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
news:u3xV7RnmEHA.3684@TK2MSFTNGP10.phx.gbl...
> I would like to achieve Anonymous access. user should be able to access

the
> webpages without having a local account on the webserver.
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:eRYGuBnmEHA.512@TK2MSFTNGP10.phx.gbl...
> me
something[vbcol=seagreen]
>
>



Kevin Wheeler

2004-09-15, 10:34 am

I forgot to tell you one thing. This server was imaged. So the
IUSER_<Server_Name> account is IUSER_Masterdevice. The server has been
renamed. Does this matter? Should I add the account with the new server
name? If so, what password would I use since I don't know the password for
the IUSER_ account?

Kevin
"Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:uDHgcUnmEHA.2096@TK2MSFTNGP15.phx.gbl...
> On your website properties under Directory Security tab click on first

Edit
> button (button under Authentication and access control). Make sure that
> "Enable Anonymous access" is selected here. Also note the account that is

in
> the list (IUSER_<Server_Name> ).
>
> Make sure that this account (IUSER_<Server_Name> has read permissions (and
> only read) on NTFS where your website content is. IIS will honor NTFS
> permissions.
>
> I hope this helps,
>
> Mike
>
> "Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
> news:u3xV7RnmEHA.3684@TK2MSFTNGP10.phx.gbl...
> the
prompts[vbcol=seagreen]
> something
>
>



Miha Pihler

2004-09-15, 10:34 am

Kevin,

Try this article.

IIS 6.0: HOW TO: Configure IIS to Control the Anonymous Password
http://support.microsoft.com/defaul...7&Product=iis60

Sorry about my mistake "IUSER_<server_name>" = "IUSR_<server_name>"
account -- it was a typo...

Mike

"Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
news:OLwb0ZnmEHA.3396@tk2msftngp13.phx.gbl...
> I forgot to tell you one thing. This server was imaged. So the
> IUSER_<Server_Name> account is IUSER_Masterdevice. The server has been
> renamed. Does this matter? Should I add the account with the new server
> name? If so, what password would I use since I don't know the password

for
> the IUSER_ account?
>
> Kevin
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:uDHgcUnmEHA.2096@TK2MSFTNGP15.phx.gbl...
> Edit
is[vbcol=seagreen]
> in
(and[vbcol=seagreen]
access[vbcol=seagreen]
Windows[vbcol=seagreen]
> prompts
>
>



David Wang [Msft]

2004-09-22, 9:26 pm

No, none of the names matter.

All you have to do is:
1. Identity the user account which you want IIS to map all anonymous access
2. Set up this user account (can be local or domain)
3. Set the W3SVC/AnonymousUserName and W3SVC/AnonymousUserPass properties to
match the credentials in #2

The username is quite irrelevant as long as you synchronize #2 and #3. All
IIS does is that on startup, if it sees that the anonymous user account is
missing, it auto-creates a user account for #2 using the known name template
scheme and synchronizes the metabase in #3. You can easily do the exact
same thing. If the account is there and synchronized, everything is ok.

Please don't configure "Allow IIS to control the anonymous password" on
IIS6. It has bad security consequences and there are good reasons that it
is no longer in the UI nor available by default.

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:Or4$ohnmEHA.2772@tk2msftngp13.phx.gbl...
Kevin,

Try this article.

IIS 6.0: HOW TO: Configure IIS to Control the Anonymous Password
http://support.microsoft.com/defaul...7&Product=iis60

Sorry about my mistake "IUSER_<server_name>" = "IUSR_<server_name>"
account -- it was a typo...

Mike

"Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
news:OLwb0ZnmEHA.3396@tk2msftngp13.phx.gbl...
> I forgot to tell you one thing. This server was imaged. So the
> IUSER_<Server_Name> account is IUSER_Masterdevice. The server has been
> renamed. Does this matter? Should I add the account with the new server
> name? If so, what password would I use since I don't know the password

for
> the IUSER_ account?
>
> Kevin
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:uDHgcUnmEHA.2096@TK2MSFTNGP15.phx.gbl...
> Edit
is[vbcol=seagreen]
> in
(and[vbcol=seagreen]
access[vbcol=seagreen]
Windows[vbcol=seagreen]
> prompts
>
>




Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com