IIS Server Security - WSUS Security Nightmare

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2005 > WSUS Security Nightmare





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author WSUS Security Nightmare
Wknight

2005-07-25, 8:18 am

Hello

I've installed WSUS over our Windows 2003 DC. Until now WSUS is being unable
to contact the selfupdate folder which is causing that the WSUS stop
responding. The error that I'm getting is a 401 (authentication). In the WSUS
log there are many entries which show that the application retries to access
the selfupdate folder each five minutes.

If I try to access the WSUS administration virtual folder from any client
over the network the I don't need to send a username and password, but if I
try to access the folder from the server I need to submit a username and
password, and if I reset the secutiry option to allow any IUSR_WSUS request
I'm getting a 401.

I tried to change all the security parameters on the IIS but nothing seems
to let me access the WSUS folders from the same server without using a
network account.

How can I set up IIS 6.0 to allow me to access the WSUS folders from the
same server anonymously?

Thanks in advance
diop

2005-07-26, 7:58 am

Put yourself to the wsus administrators group see computer management
(local) of your wsus server- local users and Groups - Groups

Wknight

2005-07-26, 7:58 am

I already did it with not success.

Thanks anyway

"diop" wrote:

> Put yourself to the wsus administrators group see computer management
> (local) of your wsus server- local users and Groups - Groups
>
>

Wknight

2005-07-26, 7:58 am

As always happens, the answer is more simple than the question.

The problem was the password for IUSR_WSUS. Some virtual folders had an
older password. That never affect the operation of the site until WSUS was
installed.

Thanks



"diop" wrote:

> Put yourself to the wsus administrators group see computer management
> (local) of your wsus server- local users and Groups - Groups
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com