IIS Server Security - IUSR account passwords sync

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > June 2005 > IUSR account passwords sync





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IUSR account passwords sync
Mike

2005-06-15, 7:48 am

How do I resynchronize the password of the IUSR account on a Windows 2003
server?

--
Mike Gasperino
Sr. Software Developer
office: 919-807-2310

****************************************
************************************
E-mail correspondence to and from this address may be subject to the North
Carolina Public Records Law "NCGS.Ch.132" and may be disclosed to third
parties
****************************************
************************************


Ken Schaefer

2005-06-15, 7:48 am

http://www.adopenstatic.com/resourc...CYA_IIS6_05.pdf

If you want to do this, you will need to enable SubAuthentication. The steps
are detailed in the PDF above under the SubAuthentication heading. However,
this is not a recommended configuration, and instead you should choose a
complex password, and manually set this in the IIS Metabase, and in the
machine's SAM database.

Cheers
Ken

--
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


"Mike" <announ@tkd.net> wrote in message
news:%235STYxZcFHA.1392@TK2MSFTNGP14.phx.gbl...
: How do I resynchronize the password of the IUSR account on a Windows 2003
: server?
:
: --
: Mike Gasperino
: Sr. Software Developer
: office: 919-807-2310


Mike

2005-06-15, 7:48 am

Ok, slightly new to this - where do I find the IIS Metabase and the SAM
database??

"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:u$sjATacFHA.3504@TK2MSFTNGP12.phx.gbl...
> http://www.adopenstatic.com/resourc...CYA_IIS6_05.pdf
>
> If you want to do this, you will need to enable SubAuthentication. The
> steps
> are detailed in the PDF above under the SubAuthentication heading.
> However,
> this is not a recommended configuration, and instead you should choose a
> complex password, and manually set this in the IIS Metabase, and in the
> machine's SAM database.
>
> Cheers
> Ken
>
> --
> IIS Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Mike" <announ@tkd.net> wrote in message
> news:%235STYxZcFHA.1392@TK2MSFTNGP14.phx.gbl...
> : How do I resynchronize the password of the IUSR account on a Windows
> 2003
> : server?
> :
> : --
> : Mike Gasperino
> : Sr. Software Developer
> : office: 919-807-2310
>
>



Ken Schaefer

2005-06-16, 2:48 am

You set the password in the IIS Metabase via the IIS Manager (Directory
Security tab -> Edit Anonymous Access)

You set the password in the SAM via Computer Management MMC -> Users and
Groups extension (Computer Management MMC Snapin is located in your Admin
Tools folder, or you can right-click on "My Computer" and choose "Manage")

There are other ways of doing these tasks, but the above are probably the
easiest ways

Cheers
Ken

--
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com

"Mike" <announ@tkd.net> wrote in message
news:%23aukPracFHA.3864@TK2MSFTNGP10.phx.gbl...
: Ok, slightly new to this - where do I find the IIS Metabase and the SAM
: database??
:
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: news:u$sjATacFHA.3504@TK2MSFTNGP12.phx.gbl...
: > http://www.adopenstatic.com/resourc...CYA_IIS6_05.pdf
: >
: > If you want to do this, you will need to enable SubAuthentication. The
: > steps
: > are detailed in the PDF above under the SubAuthentication heading.
: > However,
: > this is not a recommended configuration, and instead you should choose a
: > complex password, and manually set this in the IIS Metabase, and in the
: > machine's SAM database.
: >
: > Cheers
: > Ken
: >
: > --
: > IIS Blog: www.adopenstatic.com/cs/blogs/ken/
: > Web: www.adopenstatic.com
: >
: >
: > "Mike" <announ@tkd.net> wrote in message
: > news:%235STYxZcFHA.1392@TK2MSFTNGP14.phx.gbl...
: > : How do I resynchronize the password of the IUSR account on a Windows
: > 2003
: > : server?
: > :
: > : --
: > : Mike Gasperino
: > : Sr. Software Developer
: > : office: 919-807-2310
: >
: >
:
:


Mike

2005-06-16, 7:52 am

Ok, that's what I did, I wasn't clear with the acronyms. Unfortunately after
doing this, I still have the same issue. I will double check everything
again today, ACL's and config files to see if there is something I have
missed.

Thanks

"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:u4kYK4hcFHA.3828@tk2msftngp13.phx.gbl...
> You set the password in the IIS Metabase via the IIS Manager (Directory
> Security tab -> Edit Anonymous Access)
>
> You set the password in the SAM via Computer Management MMC -> Users and
> Groups extension (Computer Management MMC Snapin is located in your Admin
> Tools folder, or you can right-click on "My Computer" and choose "Manage")
>
> There are other ways of doing these tasks, but the above are probably the
> easiest ways
>
> Cheers
> Ken
>
> --
> IIS Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
> "Mike" <announ@tkd.net> wrote in message
> news:%23aukPracFHA.3864@TK2MSFTNGP10.phx.gbl...
> : Ok, slightly new to this - where do I find the IIS Metabase and the SAM
> : database??
> :
> : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : news:u$sjATacFHA.3504@TK2MSFTNGP12.phx.gbl...
> : > http://www.adopenstatic.com/resourc...CYA_IIS6_05.pdf
> : >
> : > If you want to do this, you will need to enable SubAuthentication. The
> : > steps
> : > are detailed in the PDF above under the SubAuthentication heading.
> : > However,
> : > this is not a recommended configuration, and instead you should choose
> a
> : > complex password, and manually set this in the IIS Metabase, and in
> the
> : > machine's SAM database.
> : >
> : > Cheers
> : > Ken
> : >
> : > --
> : > IIS Blog: www.adopenstatic.com/cs/blogs/ken/
> : > Web: www.adopenstatic.com
> : >
> : >
> : > "Mike" <announ@tkd.net> wrote in message
> : > news:%235STYxZcFHA.1392@TK2MSFTNGP14.phx.gbl...
> : > : How do I resynchronize the password of the IUSR account on a Windows
> : > 2003
> : > : server?
> : > :
> : > : --
> : > : Mike Gasperino
> : > : Sr. Software Developer
> : > : office: 919-807-2310
> : >
> : >
> :
> :
>
>



Tiago Halm

2005-06-16, 5:52 pm

In Win2003/IIS6 set a pwd for the IUSR_<machinename> local account like you
would do with a normal account.
After that, go to the UI of IIS and set the account and PWD the same way.

its that simple.

Tiago Halm

"Mike" <announ@tkd.net> wrote in message
news:%235STYxZcFHA.1392@TK2MSFTNGP14.phx.gbl...
> How do I resynchronize the password of the IUSR account on a Windows 2003
> server?
>
> --
> Mike Gasperino
> Sr. Software Developer
> office: 919-807-2310
>
>

****************************************
************************************[vbc
ol=seagreen]
> E-mail correspondence to and from this address may be subject to the North
> Carolina Public Records Law "NCGS.Ch.132" and may be disclosed to third
> parties
>[/vbcol]
****************************************
************************************[vbc
ol=seagreen]
>
>[/vbcol]


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com