|
Home > Archive > Microsoft Content Management Server > June 2007 > MCMS 401.1
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| jezbrewster@googlemail.com 2007-06-03, 7:17 pm |
| Hello
I have installed MCMS 2002 SP2 on 2 new production webservers, and
have setup the sites in IIS 6 but cannot get the sites to run without
receiving 401.1 errors.
If I change the anonymous user account to an administrator account
(yep, I know; won't be doing this when we launch the new servers)
(other than the IUSR_MYDOMAIN-APP6 Internet Guest Account), then
everything works OK. Since we already have 3 webservers in the
webfarm running fine with IUSR_MYDOMAIN-APPx as the anonymous user
account (and I want to do the same with these 2 new webservers) , I'm
assuming I have problems with permissions. I have already checked the
permissions listed at http://support.microsoft.com/?id=812614 (Default
permissions and user rights for IIS 6.0) and everything appears to be
in place. I'd be grateful for any ideas for what I am missing.
I get the following failure entry in the server's security event log:
Logon Failure:
Reason: The user has not been granted
the requested logon type at this machine
User Name: IUSR_MYDOMAIN-APP6
Domain: MYDOMAIN-APP6
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: MYDOMAIN-APP6
Caller User Name: NETWORK SERVICE
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E4)
Caller Process ID: 2452
Transited Services: -
Source Network Address: -
Source Port: -
Thanks in advance
Jez
| |
| Stefan Goßner [MSFT] 2007-06-04, 7:17 am |
| Hi Jez,
the error message indicates that the account is not allowed to login using
the LOGON32_LOGON_NETWORK_CLEARTEXT logon type.
Cheers,
Stefan
<jezbrewster@googlemail.com> wrote in message
news:1180908998.953942.298720@p47g2000hsd.googlegroups.com...
> Hello
>
> I have installed MCMS 2002 SP2 on 2 new production webservers, and
> have setup the sites in IIS 6 but cannot get the sites to run without
> receiving 401.1 errors.
>
> If I change the anonymous user account to an administrator account
> (yep, I know; won't be doing this when we launch the new servers)
> (other than the IUSR_MYDOMAIN-APP6 Internet Guest Account), then
> everything works OK. Since we already have 3 webservers in the
> webfarm running fine with IUSR_MYDOMAIN-APPx as the anonymous user
> account (and I want to do the same with these 2 new webservers) , I'm
> assuming I have problems with permissions. I have already checked the
> permissions listed at http://support.microsoft.com/?id=812614 (Default
> permissions and user rights for IIS 6.0) and everything appears to be
> in place. I'd be grateful for any ideas for what I am missing.
>
> I get the following failure entry in the server's security event log:
>
> Logon Failure:
>
> Reason: The user has not been granted
> the requested logon type at this machine
> User Name: IUSR_MYDOMAIN-APP6
> Domain: MYDOMAIN-APP6
> Logon Type: 8
> Logon Process: Advapi
> Authentication Package: Negotiate
> Workstation Name: MYDOMAIN-APP6
> Caller User Name: NETWORK SERVICE
> Caller Domain: NT AUTHORITY
> Caller Logon ID: (0x0,0x3E4)
> Caller Process ID: 2452
> Transited Services: -
> Source Network Address: -
> Source Port: -
>
> Thanks in advance
>
> Jez
>
| |
| jezbrewster@googlemail.com 2007-06-04, 1:21 pm |
| Hi Stefan
Thanks for the reply. Am I right in thinking that to allow the
LOGON32_LOGON_NETWORK_CLEARTEXT logon type, I just have to grant the
Internet Guest Account the "Access this computer from the network"
access permission? I've tried that without luck (was already set with
this permission).
Thanks
Jez
On 4 Jun, 09:32, "Stefan Go=DFner [MSFT]" <stef...@online.microsoft.com>
wrote:
> Hi Jez,
>
> the error message indicates that the account is not allowed to login using
> the LOGON32_LOGON_NETWORK_CLEARTEXT logon type.
>
> Cheers,
> Stefan
>
> <jezbrews...@googlemail.com> wrote in message
>
> news:1180908998.953942.298720@p47g2000hsd.googlegroups.com...
>
>
>
>
>
>
>
>
>
>
>
> - Show quoted text -
| |
| Stefan Goßner [MSFT] 2007-06-05, 7:16 am |
| Hi Jez,
honestly: no idea. That is not a CMS related question.
You should ask on a more Windows Security related newsgroup.
Cheers,
Stefan
<jezbrewster@googlemail.com> wrote in message
news:1180978602.206282.134750@p77g2000hsh.googlegroups.com...
Hi Stefan
Thanks for the reply. Am I right in thinking that to allow the
LOGON32_LOGON_NETWORK_CLEARTEXT logon type, I just have to grant the
Internet Guest Account the "Access this computer from the network"
access permission? I've tried that without luck (was already set with
this permission).
Thanks
Jez
On 4 Jun, 09:32, "Stefan Goßner [MSFT]" <stef...@online.microsoft.com>
wrote:
> Hi Jez,
>
> the error message indicates that the account is not allowed to login using
> the LOGON32_LOGON_NETWORK_CLEARTEXT logon type.
>
> Cheers,
> Stefan
>
> <jezbrews...@googlemail.com> wrote in message
>
> news:1180908998.953942.298720@p47g2000hsd.googlegroups.com...
>
>
>
>
>
>
>
>
>
>
>
> - Show quoted text -
|
|
|
|
|