IIS Server Security - What do these Account Names mean?

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2005 > What do these Account Names mean?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author What do these Account Names mean?
SMAccount@gmail.com

2005-11-14, 5:56 pm

There are a number of users listed in the Permissions List for a
Folder on my Web Host (names changed slightly to protect the innocent).
Can anyone tell me where these are defined? For instance, what is
OWS?

Administrator -- RWXDPO
SYSTEM -- RWXDPO
NETWORK -- RX
NETWORK SERVICE -- RX
IUSR_JOHNSMITH -- RX
Administrators -- RWXDPO
OWS_13426299_admin -- RWXDP
INTERACTIVE -- RX
IUSR_DEDI444 -- RWXDPO

Miha Pihler [MVP]

2005-11-15, 2:51 am

Hi,

Administrator -- (usually) a built in account
SYSTEM -- Local System ("special" computer) account (another built in
account)
NETWORK -- I believe this is a dynamic group
NETWORK SERVICE -- I believe this is a dynamic group
IUSR_JOHNSMITH -- Account used for anonymous access to the server (probablly
server called JOHNSMITH)
Administrators -- a built in group with all local administrators
OWS_13426299_admin -- don't know this one (could be a account that was added
by one of the admins)
INTERACTIVE -- dynamic group -- user becomes a member of this group when
he/she logs on to the computer while at console
IUSR_DEDI444 -- Account used for anonymous access to the server (probably
server called DEDI444)

Most of these would be local computer accounts (and some groups). Right
click on My Computer and then click on Manage. There is container called
Local Users and Groups. Click on Users and you should see Administrator (you
can't delete built-in accounts), you should see IUSR_... and OWS ...).

You won't be able to see here Dynamic Groups like NETWORK, and INTERACTIVE,
.... and you can't change membership in these dynamic groups. As name tells
you membership is assigned automatically.

--
Mike
Microsoft MVP - Windows Security

<SMAccount@gmail.com> wrote in message
news:1132010920.319770.158500@o13g2000cwo.googlegroups.com...
> There are a number of users listed in the Permissions List for a
> Folder on my Web Host (names changed slightly to protect the innocent).
> Can anyone tell me where these are defined? For instance, what is
> OWS?
>
> Administrator -- RWXDPO
> SYSTEM -- RWXDPO
> NETWORK -- RX
> NETWORK SERVICE -- RX
> IUSR_JOHNSMITH -- RX
> Administrators -- RWXDPO
> OWS_13426299_admin -- RWXDP
> INTERACTIVE -- RX
> IUSR_DEDI444 -- RWXDPO
>



Peter Schmidt

2005-11-15, 2:51 am

Hi

OWS_xxxxx_Admin is part of Frontpage extensions, so if you've installed that
on your servers, then that's way you seen this account.

See this article with a decription of the accounts and groups used by IIS 6.
http://www.microsoft.com/technet/co...r/iisi0803.mspx


Regards
Peter Schmidt
www.iis-digest.com


<SMAccount@gmail.com> wrote in message
news:1132010920.319770.158500@o13g2000cwo.googlegroups.com...
> There are a number of users listed in the Permissions List for a
> Folder on my Web Host (names changed slightly to protect the innocent).
> Can anyone tell me where these are defined? For instance, what is
> OWS?
>
> Administrator -- RWXDPO
> SYSTEM -- RWXDPO
> NETWORK -- RX
> NETWORK SERVICE -- RX
> IUSR_JOHNSMITH -- RX
> Administrators -- RWXDPO
> OWS_13426299_admin -- RWXDP
> INTERACTIVE -- RX
> IUSR_DEDI444 -- RWXDPO
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com