Hi
I do not run a domain or Active Directory.
I am on IIS 5.0 on Windows 2000 server.
When I secure a folder and its files I
am having a problem getting the new
user to be able to access it. The IIS
security tab has Anonymous unchecked.
The other two boxes are checked.
I have tried also with only the clear
text authentication checked.
I have tried that user with having all
the way up to FULL permissions, without
it working.
I get a 401.3 error.
However, If I allow IUSR/Machine or add the
new user (temporarily) to Administrators group,
it works fine.
Am I forgetting something or could something
have happened to screw up my security management?
Regards,
Fox
5  4232 
"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:c1******** **@kcweb01.netn ews.att.com... "Fox" <fox @ connexions .net> wrote in message
news:u3******** ******@TK2MSFTN GP12.phx.gbl... Hi
I do not run a domain or Active Directory.
I am on IIS 5.0 on Windows 2000 server.
When I secure a folder and its files I
am having a problem getting the new
user to be able to access it. The IIS
security tab has Anonymous unchecked.
The other two boxes are checked.
I have tried also with only the clear
text authentication checked.
I have tried that user with having all
the way up to FULL permissions, without
it working.
I get a 401.3 error.
However, If I allow IUSR/Machine or add the
new user (temporarily) to Administrators group,
it works fine.
Am I forgetting something or could something
have happened to screw up my security management?
401.3 means the account still does not have NTFS permission to the file
requested.
IIS 5 Documentation
http://www.microsoft.com/windows2000/en/server/iis/
Microsoft Internet Information Server
Administration
Server Administration
Security
Authentication
Access Control
IIS 6 Documentation
http://www.microsoft.com/technet/pro.../proddocs/stan
dard/gs_authenticati on.asp
HOW TO: Configure IIS 5.0 Web Site Authentication in Windows 2000
http://support.microsoft.com/?id=310344
HOW TO: Configure User and Group Access on an Intranet in Windows 2000 or
Windows NT 4.0
http://support.microsoft.com/?id=325358
HOW TO: Configure IIS Web Site Authentication in Windows Server 2003
http://support.microsoft.com/default...b;en-us;324274
--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running
IIS http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserv...y/centers/iis/
If there is a more appropriate NG for this, can you point me to it
so I will not be off topic? I did not find one.
Thanks for all the detailed links. I entirely read all but the first one.
I have been running this server for 2 years after 6 years with NT4
and this problem just started.
There has to be something seriously comprimised. I really don't know
what the next thing to do will be. Reformtting and starting over is not
an option right now. I have sat at the computer as long as 5 hours
straight fiddling around with tests, on more than one occasion, and
it just doesn't work right anymore. Have you ever heard of this type
of a comprimise. I know I have been hacked and cannot find the
remnants on server. I do not know what it had done, but I stopped
it from calling home and have had to live with it in that state. No
programs nor does my searching find the culprit. Meanwhile I am thinking
that if is it possible, this is what comprimised my security since it
just doesn't work right anymore.
It is obvious that if I can get someone in there on Front Page
and they are part of the users group and clear text is selected
then everything has been done. As I had mentioned, if I add them
to the ADMIN group or if I allow IUSR to access the folder
it works fine. I would think from that, that I have done all I can
do. HELP !
Feedback is more than welcome
Regards,
Dennis
"Fox" <fox @ connexions .net> wrote in message
news:Oq******** ******@TK2MSFTN GP10.phx.gbl...
"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:c1******** **@kcweb01.netn ews.att.com... "Fox" <fox @ connexions .net> wrote in message
news:u3******** ******@TK2MSFTN GP12.phx.gbl... Hi
I do not run a domain or Active Directory.
I am on IIS 5.0 on Windows 2000 server.
When I secure a folder and its files I
am having a problem getting the new
user to be able to access it. The IIS
security tab has Anonymous unchecked.
The other two boxes are checked.
I have tried also with only the clear
text authentication checked.
I have tried that user with having all
the way up to FULL permissions, without
it working.
I get a 401.3 error.
However, If I allow IUSR/Machine or add the
new user (temporarily) to Administrators group,
it works fine.
Am I forgetting something or could something
have happened to screw up my security management?
401.3 means the account still does not have NTFS permission to the file
requested.
IIS 5 Documentation
http://www.microsoft.com/windows2000/en/server/iis/
Microsoft Internet Information Server
Administration
Server Administration
Security
Authentication
Access Control
IIS 6 Documentation
http://www.microsoft.com/technet/pro.../proddocs/stan dard/gs_authenticati on.asp
HOW TO: Configure IIS 5.0 Web Site Authentication in Windows 2000
http://support.microsoft.com/?id=310344
HOW TO: Configure User and Group Access on an Intranet in Windows 2000
or Windows NT 4.0
http://support.microsoft.com/?id=325358
HOW TO: Configure IIS Web Site Authentication in Windows Server 2003
http://support.microsoft.com/default...b;en-us;324274
--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserv...y/centers/iis/
If there is a more appropriate NG for this, can you point me to it
so I will not be off topic? I did not find one.
Why microsoft.publi c.inetserver.ii s of course!
Thanks for all the detailed links. I entirely read all but the first one.
I have been running this server for 2 years after 6 years with NT4
and this problem just started.
There has to be something seriously comprimised. I really don't know
what the next thing to do will be. Reformtting and starting over is not
an option right now. I have sat at the computer as long as 5 hours
straight fiddling around with tests, on more than one occasion, and
it just doesn't work right anymore. Have you ever heard of this type
of a comprimise. I know I have been hacked and cannot find the
remnants on server. I do not know what it had done, but I stopped
it from calling home and have had to live with it in that state. No
programs nor does my searching find the culprit. Meanwhile I am thinking
that if is it possible, this is what comprimised my security since it
just doesn't work right anymore.
No, i've never heard of this type of compromise - but if you've been hacked
and can't get anything to work right, sometimes rebuidling from scratch is
the only solution ...
It is obvious that if I can get someone in there on Front Page
and they are part of the users group and clear text is selected
then everything has been done. As I had mentioned, if I add them
to the ADMIN group or if I allow IUSR to access the folder
it works fine. I would think from that, that I have done all I can
do. HELP !
Try here:
HOW TO: Set Basic NTFS Permissions for IIS 5.0 http://support.microsoft.com/default...b;en-us;271071
How to Restore the Default NTFS Permissions for Windows 2000 http://support.microsoft.com/default...b;en-us;266188
HOW TO: Set IIS Permissions for Specific Objects http://support.microsoft.com/default...b;en-us;324068
--
Tom Kaminski IIS MVP http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS http://mvp.support.microsoft.com/ http://www.microsoft.com/windowsserv...y/centers/iis/
"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:c1******** **@kcweb01.netn ews.att.com... "Fox" <fox @ connexions .net> wrote in message
news:Oq******** ******@TK2MSFTN GP10.phx.gbl... If there is a more appropriate NG for this, can you point me to it
so I will not be off topic? I did not find one.
Why microsoft.publi c.inetserver.ii s of course!
Oh yeah, microsoft.publi c.inetserver.ii s.security is probably a good one too
....
--
Tom Kaminski IIS MVP http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS http://mvp.support.microsoft.com/ http://www.microsoft.com/windowsserv...y/centers/iis/
Your user account may need permissions on a file outside of the application
such as a component dll. Enable file auditing and check for access failures.
--
Mark Schupp
Head of Development
Integrity eLearning www.ielearning.com
"Fox" <fox @ connexions .net> wrote in message
news:Oq******** ******@TK2MSFTN GP10.phx.gbl...
"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:c1******** **@kcweb01.netn ews.att.com... "Fox" <fox @ connexions .net> wrote in message
news:u3******** ******@TK2MSFTN GP12.phx.gbl... Hi
I do not run a domain or Active Directory.
I am on IIS 5.0 on Windows 2000 server.
When I secure a folder and its files I
am having a problem getting the new
user to be able to access it. The IIS
security tab has Anonymous unchecked.
The other two boxes are checked.
I have tried also with only the clear
text authentication checked.
I have tried that user with having all
the way up to FULL permissions, without
it working.
I get a 401.3 error.
However, If I allow IUSR/Machine or add the
new user (temporarily) to Administrators group,
it works fine.
Am I forgetting something or could something
have happened to screw up my security management?
401.3 means the account still does not have NTFS permission to the file
requested.
IIS 5 Documentation
http://www.microsoft.com/windows2000/en/server/iis/
Microsoft Internet Information Server
Administration
Server Administration
Security
Authentication
Access Control
IIS 6 Documentation
http://www.microsoft.com/technet/pro.../proddocs/stan dard/gs_authenticati on.asp
HOW TO: Configure IIS 5.0 Web Site Authentication in Windows 2000
http://support.microsoft.com/?id=310344
HOW TO: Configure User and Group Access on an Intranet in Windows 2000
or Windows NT 4.0
http://support.microsoft.com/?id=325358
HOW TO: Configure IIS Web Site Authentication in Windows Server 2003
http://support.microsoft.com/default...b;en-us;324274
--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running
IIS http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserv...y/centers/iis/
If there is a more appropriate NG for this, can you point me to it
so I will not be off topic? I did not find one.
Thanks for all the detailed links. I entirely read all but the first one.
I have been running this server for 2 years after 6 years with NT4
and this problem just started.
There has to be something seriously comprimised. I really don't know
what the next thing to do will be. Reformtting and starting over is not
an option right now. I have sat at the computer as long as 5 hours
straight fiddling around with tests, on more than one occasion, and
it just doesn't work right anymore. Have you ever heard of this type
of a comprimise. I know I have been hacked and cannot find the
remnants on server. I do not know what it had done, but I stopped
it from calling home and have had to live with it in that state. No
programs nor does my searching find the culprit. Meanwhile I am thinking
that if is it possible, this is what comprimised my security since it
just doesn't work right anymore.
It is obvious that if I can get someone in there on Front Page
and they are part of the users group and clear text is selected
then everything has been done. As I had mentioned, if I add them
to the ADMIN group or if I allow IUSR to access the folder
it works fine. I would think from that, that I have done all I can
do. HELP !
Feedback is more than welcome
Regards,
Dennis
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: AIM |
last post by:
Error in msvc in building inheritance.obj to build hello.pyd
Hello,
I am trying to build the boost 1.31.0 sample extension hello.cpp.
I can not compile the file inheritance.cpp because the two
files containing some templates: adjacency_list.hpp and mem_fn.hpp can
not compile.
Does anyone have any solutions?
|
by: Gregory |
last post by:
Hi,
One of the disadvantages of using error handling with error codes
instead of exception handling is that error codes retuned from a
function can be forgotten to check thus leading to
unexpected run-time problems. Exceptions on the other hand can not be
simply ignored.
In order to solve this error codes problem I suggest using error object
instead of error codes.
Each function has to return an error object that stores an error
|
by: deko |
last post by:
I use this convention frequently:
Exit_Here:
Exit Sub
HandleErr:
Select Case Err.Number
Case 3163
Resume Next
Case 3376
Resume Next
|
by: p |
last post by:
WE had a Crystal 8 WebApp using vs 2002 which we upgraded to VS2003. I also
have Crystal 9 pro on my development machine. The web app runs fine on my
dev machine but am having problems deploying. I created the websetup and
built the MSI, have the bundled version. Copied to webserver and ran
Websetup.msi. Said I had to remove old version, which I did, then reran
WebSetup.msi and keeps giving me this error. "The installer was interrupted...
|
by: Manuel |
last post by:
I'm trying to compile glut 3.7.6 (dowbloaded from official site)using
devc++.
So I've imported the glut32.dsp into devc++, included manually some
headers, and start to compile.
It return a very strange error. In your experience, where I should
looking to find the real error? Surely the sintax of glut is correct...
gcc.exe -c glut_bitmap.c -o glut_bitmap.o -I"C:/Dev-Cpp/include"
-I"../../include" -D__GNUWIN32__ -W -DWIN32 -DNDEBUG...
| | |
by: bazzer |
last post by:
hey,
im trying to access a microsoft access database from an ASP.NET web
application in visual basic 2003.NET. i get the following error when i
try running it:
Server Error in '/CinemaBookingSystem' Application.
--------------------------------------------------------------------------------
ERROR General error
Unable to open registry key 'Temporary (volatile) Jet DSN for process
|
by: developer |
last post by:
Hi All
I have made a .NET project.
the files included are borland c++ files that i am migrate to VC++ .NET
I am using Microsoft Visual C++ .NET 2003.
the compilation goes through properly, but throws a load of linker
errors
|
by: mchuc7719 |
last post by:
Hello,
I have a Vb.Net 2005 ClassLibrary, when I try to compile using MSBee, only
get errors.
Before I to run the command line, I open in notepad the .vbproj and I was
add the next line:
Target CoreCompile:
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Vbc.exe
|
by: hyperpau |
last post by:
Before anything else, I am not a very technical expert when it comes to VBA coding.
I learned most of what I know by the excellent Access/VBA forum from bytes.com (formerly thescripts.com).
Ergo, I will be writing this article intended for those who are in the same level, or maybe lower, of my technical knowledge.
I would be using layman's words, or maybe, my own words as how I understand them, hoping, you will understand it the same way that...
|
by: hyperpau |
last post by:
Before anything else, I am not a very technical expert when it comes to VBA coding.
I learned most of what I know by the excellent Access/VBA forum from bytes.com (formerly thescripts.com).
Ergo, I will be writing this article intended for those who are in the same level, or maybe lower, of my technical knowledge.
I would be using layman's words, or maybe, my own words as how I understand them, hoping, you will understand it the same way that...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
| | |
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
| | |
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| |
