IIS Server Security - anonymous access group perms

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > September 2006 > anonymous access group perms





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author anonymous access group perms
Matt

2006-09-05, 7:43 pm

hello,

We have a win2k3/iis6 member server. I've created a new anonymous user
which works fine. I've created a group on the member server, not a domain
group, for all accounts that need anonymous access including the new anon
user, but when I remove explicit perms for the new anon users and rely on
the perms given to the group, anon access stops working. The group's NTFS
perms are the same that are given to the anon user. Am I doing something
wrong or is it always necessary to give perms explicitely to the anon user?

thanks in advance,
Matt


Roger Abell [MVP]

2006-09-06, 7:48 pm

Did you use iisreset or some other action in order to guarantee
that the account had to do a new login after having the new group
membership given to it ??

"Matt" <matt@nospam.com> wrote in message
news:ey92UwS0GHA.1292@TK2MSFTNGP03.phx.gbl...
> hello,
>
> We have a win2k3/iis6 member server. I've created a new anonymous user
> which works fine. I've created a group on the member server, not a domain
> group, for all accounts that need anonymous access including the new anon
> user, but when I remove explicit perms for the new anon users and rely on
> the perms given to the group, anon access stops working. The group's NTFS
> perms are the same that are given to the anon user. Am I doing something
> wrong or is it always necessary to give perms explicitely to the anon
> user?
>
> thanks in advance,
> Matt
>



Matt

2006-09-06, 7:48 pm

That looks like the resolution. Thanks very much.

"Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message
news:u5$FgAc0GHA.1568@TK2MSFTNGP03.phx.gbl...
> Did you use iisreset or some other action in order to guarantee
> that the account had to do a new login after having the new group
> membership given to it ??
>
> "Matt" <matt@nospam.com> wrote in message
> news:ey92UwS0GHA.1292@TK2MSFTNGP03.phx.gbl...
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com