IIS Server Security - XP PRO and IIS 5.1

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > August 2005 > XP PRO and IIS 5.1





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author XP PRO and IIS 5.1
RL Snowdon

2005-08-01, 2:55 am

Hi,

I have been running our internal intranet using WIN2000 with IIS and using
Frontpage 2003 to edit, author our client websites. Now installing new
server running win XP Pro with IIS 5.1 and can not access the webs as there
are some security changes that are frustrating use. If we try to open the
local web (http://localweb) the system assumes I am a "Guest" (unable to
change as greyed out) and prompts me to enter a password.

I have setup local accounts on the new server to coincide with the
individual users but nothing seems to work.

Any Guru's with the inner knowledge!

Jeff


Miha Pihler [MVP]

2005-08-01, 2:55 am

Hi,

Open Group Policy (Local Policy) Editor (one way of doing it is to go
Start -> Run -> gpedit.msc and click OK). Once the editor loads drill down
under Computer Configuration -> Windows Settings -> Security Settings ->
Local Policies -> Security Options. Here look for policy called: "Network
Access: Sharing and security model for local accounts". Set it to "Classic -
local users authenticate as themselves (it is probably set to Guest only).

Also make sure that _all_ accounts have passwords or you won't be able to
authenticate. There is a policy that limits local account use of blank
password to console logon only.

I hope this helps,

--
Mike
Microsoft MVP - Windows Security

"RL Snowdon" <jeffrey@rlsnowdon.com.au> wrote in message
news:%23HVeP7klFHA.3568@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> I have been running our internal intranet using WIN2000 with IIS and using
> Frontpage 2003 to edit, author our client websites. Now installing new
> server running win XP Pro with IIS 5.1 and can not access the webs as
> there are some security changes that are frustrating use. If we try to
> open the local web (http://localweb) the system assumes I am a "Guest"
> (unable to change as greyed out) and prompts me to enter a password.
>
> I have setup local accounts on the new server to coincide with the
> individual users but nothing seems to work.
>
> Any Guru's with the inner knowledge!
>
> Jeff
>
>



RL Snowdon

2005-08-01, 8:29 am

Many thanks.

This was driving me nuts and the solution was just as you indicated. We have
had a stable configuration which worked really well for us but a computer
upgrade (and OS system) changed the rules and we just didn't know how to
regain the status quo.

Thanks again

"Miha Pihler [MVP]" <mihap-news@atlantis.si> wrote in message
news:u65liInlFHA.1948@TK2MSFTNGP12.phx.gbl...
> Hi,
>
> Open Group Policy (Local Policy) Editor (one way of doing it is to go
> Start -> Run -> gpedit.msc and click OK). Once the editor loads drill down
> under Computer Configuration -> Windows Settings -> Security Settings ->
> Local Policies -> Security Options. Here look for policy called: "Network
> Access: Sharing and security model for local accounts". Set it to
> "Classic - local users authenticate as themselves (it is probably set to
> Guest only).
>
> Also make sure that _all_ accounts have passwords or you won't be able to
> authenticate. There is a policy that limits local account use of blank
> password to console logon only.
>
> I hope this helps,
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "RL Snowdon" <jeffrey@rlsnowdon.com.au> wrote in message
> news:%23HVeP7klFHA.3568@TK2MSFTNGP10.phx.gbl...
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com