473,395 Members | 2,222 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,395 software developers and data experts.

mapping to users home directory

I am trying to write an asp or aspx page that will create
a virtual ftp directory to the users Active Directory
home directory. That way a user can interact (drag/drop,
copy/paste) via IE with folder view for ftp sites.

I have some code, that seems to be "flaky" it works for
me and some others, but not everyone. I really need to
get a stable version. My asp code is below. Having it
in ASP is fine, but it would be a bonus to have a solid
ASPX (ASP.net) solution.

There is one issue I have ran into that is pretty
annoying, and I am not sure if it can be fixed or not and
that is the security of the virtual directory and file.
I would prefer that when the user is at work on the
network and logged in with their AD account that they
would not be challenged to authenticate, but I could not
get the "request.ServerVariables("AUTH_PASSWORD")" method
to work unless Basic Authentication is used, requiring
the user to login. I do not know if this can be avoided
in ASP.net, but if I can use an aspx page that can get
the password without having to decrypt or whatever that
would be ideal. Anyway, here is the code I have:
----------------------------------------------------------
-------------------------
<%

strFullUserName = request.ServerVariables("AUTH_USER")
strUserPass = request.ServerVariables("AUTH_PASSWORD")
strWebServer = request.ServerVariables("SERVER_NAME")
strWebServerIP = request.ServerVariables("LOCAL_ADDR")

'Split domain and username

strUserDomain = strFullUserName
strUserDomain = Mid (strFullUserName, 1, Instr
(strFullUserName, "\")-1)
strUserDomainLength = len(strUserDomain)
strFullUserNameLength = Len(strFullUserName)
strUserName = Right (strFullUserName,
strFullUserNameLength - strUserDomainLength -1)

Set objUser = GetObject("WinNT://" & strUserDomain & "/"
& strUserName, user)
strUserHome = objUser.homeDirectory

strVD = "ftp://" & strWebServer & "/"
On Error Resume Next

Set IISOBJ = GetObject
("IIS://Localhost/MSFTPSVC/1/Root")
Set NewDir = IISOBJ.Create("IIsFtpVirtualDir",
strUserName)

Error.Number = 0
NewDir.Path = strUserHome
NewDir.AccessRead = True
NewDir.AccessWrite = True
NewDir.UNCUserName = strfullUserName
NewDir.UNCPassword = strUserPass
NewDir.SetInfo
Set NewDir=Nothing
Set IISObJ=Nothing
Response.Redirect( "ftp://testportal" )
'response.write ("Your P Drive Was Mapped
Successfully!"& "<a href=""ftp://testportal/"">Click
Here</a><br>")

%>
Jul 19 '05 #1
15 3852
Connecting to LDAP, IIS, etc. is not going to work for authenticated users
that are 'peons'... they must be members of certain privilege groups in
order to create an IIS application; for example, guests and domain users do
not have this privilege.

So, this isn't necessarily that you have flaky code, but that you expect any
user to be able to create your objects. A possible alternative would be to
store the data or set some flag in a database, and have a VBS script that
runs as you or as Administrator, wake up every minute and see if there is a
user to add; if so, create the stuff. The VBS script would then run as a
user with enough privileges to create everything you want to create here.
Of course there would sometimes be a lag of up to a minute, between the time
the user entered the data via the ASP page, and when the directory was
actually created and available for use.

A


"scmiles" <sc*****@nospam-dmacc.edu> wrote in message
news:0a****************************@phx.gbl...
I am trying to write an asp or aspx page that will create
a virtual ftp directory to the users Active Directory
home directory. That way a user can interact (drag/drop,
copy/paste) via IE with folder view for ftp sites.

I have some code, that seems to be "flaky" it works for
me and some others, but not everyone. I really need to
get a stable version. My asp code is below. Having it
in ASP is fine, but it would be a bonus to have a solid
ASPX (ASP.net) solution.

There is one issue I have ran into that is pretty
annoying, and I am not sure if it can be fixed or not and
that is the security of the virtual directory and file.
I would prefer that when the user is at work on the
network and logged in with their AD account that they
would not be challenged to authenticate, but I could not
get the "request.ServerVariables("AUTH_PASSWORD")" method
to work unless Basic Authentication is used, requiring
the user to login. I do not know if this can be avoided
in ASP.net, but if I can use an aspx page that can get
the password without having to decrypt or whatever that
would be ideal. Anyway, here is the code I have:
----------------------------------------------------------
-------------------------
<%

strFullUserName = request.ServerVariables("AUTH_USER")
strUserPass = request.ServerVariables("AUTH_PASSWORD")
strWebServer = request.ServerVariables("SERVER_NAME")
strWebServerIP = request.ServerVariables("LOCAL_ADDR")

'Split domain and username

strUserDomain = strFullUserName
strUserDomain = Mid (strFullUserName, 1, Instr
(strFullUserName, "\")-1)
strUserDomainLength = len(strUserDomain)
strFullUserNameLength = Len(strFullUserName)
strUserName = Right (strFullUserName,
strFullUserNameLength - strUserDomainLength -1)

Set objUser = GetObject("WinNT://" & strUserDomain & "/"
& strUserName, user)
strUserHome = objUser.homeDirectory

strVD = "ftp://" & strWebServer & "/"
On Error Resume Next

Set IISOBJ = GetObject
("IIS://Localhost/MSFTPSVC/1/Root")
Set NewDir = IISOBJ.Create("IIsFtpVirtualDir",
strUserName)

Error.Number = 0
NewDir.Path = strUserHome
NewDir.AccessRead = True
NewDir.AccessWrite = True
NewDir.UNCUserName = strfullUserName
NewDir.UNCPassword = strUserPass
NewDir.SetInfo
Set NewDir=Nothing
Set IISObJ=Nothing
Response.Redirect( "ftp://testportal" )
'response.write ("Your P Drive Was Mapped
Successfully!"& "<a href=""ftp://testportal/"">Click
Here</a><br>")

%>

Jul 19 '05 #2
An FTP site?? FTP Servers don't do ASP.

An FTP Server will automatically dump a user into a folder if there is
a folder that matches their username. Just create a virtual folder
that is the same folder name as the username. Then point it to
whatever in the file system location you want it to be. When the user
logs in as the particular user name it will auotmatically dump them in
the right folder.

Example:

User name: JSmith

Virtual Directory: JSmith
Virtual Directory Physical Path: "C:\where\ever\the\files\are\"
Virtual Directory Logical Path: ftp://servername/jsmith

When user connect to it as JSmith they are automatically dumped into
thier proper folder. It might be their "ROOT" so it may only show up
as "ftp://servername", but I don't remember for sure. Just have them
upload a file, then you go look for it and see where it ended up.
--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com

"scmiles" <sc*****@nospam-dmacc.edu> wrote in message
news:0a****************************@phx.gbl...
I am trying to write an asp or aspx page that will create
a virtual ftp directory to the users Active Directory
home directory. That way a user can interact (drag/drop,
copy/paste) via IE with folder view for ftp sites.

I have some code, that seems to be "flaky" it works for
me and some others, but not everyone. I really need to
get a stable version. My asp code is below. Having it
in ASP is fine, but it would be a bonus to have a solid
ASPX (ASP.net) solution.

There is one issue I have ran into that is pretty
annoying, and I am not sure if it can be fixed or not and
that is the security of the virtual directory and file.
I would prefer that when the user is at work on the
network and logged in with their AD account that they
would not be challenged to authenticate, but I could not
get the "request.ServerVariables("AUTH_PASSWORD")" method
to work unless Basic Authentication is used, requiring
the user to login. I do not know if this can be avoided
in ASP.net, but if I can use an aspx page that can get
the password without having to decrypt or whatever that
would be ideal. Anyway, here is the code I have:
----------------------------------------------------------
-------------------------
<%

strFullUserName = request.ServerVariables("AUTH_USER")
strUserPass = request.ServerVariables("AUTH_PASSWORD")
strWebServer = request.ServerVariables("SERVER_NAME")
strWebServerIP = request.ServerVariables("LOCAL_ADDR")

'Split domain and username

strUserDomain = strFullUserName
strUserDomain = Mid (strFullUserName, 1, Instr
(strFullUserName, "\")-1)
strUserDomainLength = len(strUserDomain)
strFullUserNameLength = Len(strFullUserName)
strUserName = Right (strFullUserName,
strFullUserNameLength - strUserDomainLength -1)

Set objUser = GetObject("WinNT://" & strUserDomain & "/"
& strUserName, user)
strUserHome = objUser.homeDirectory

strVD = "ftp://" & strWebServer & "/"
On Error Resume Next

Set IISOBJ = GetObject
("IIS://Localhost/MSFTPSVC/1/Root")
Set NewDir = IISOBJ.Create("IIsFtpVirtualDir",
strUserName)

Error.Number = 0
NewDir.Path = strUserHome
NewDir.AccessRead = True
NewDir.AccessWrite = True
NewDir.UNCUserName = strfullUserName
NewDir.UNCPassword = strUserPass
NewDir.SetInfo
Set NewDir=Nothing
Set IISObJ=Nothing
Response.Redirect( "ftp://testportal" )
'response.write ("Your P Drive Was Mapped
Successfully!"& "<a href=""ftp://testportal/"">Click
Here</a><br>")

%>

Jul 19 '05 #3
For testing purposes, the Everyone group has permissions
to the create the VD they need in the metabase.
-----Original Message-----
Connecting to LDAP, IIS, etc. is not going to work for authenticated usersthat are 'peons'... they must be members of certain privilege groups inorder to create an IIS application; for example, guests and domain users donot have this privilege.

So, this isn't necessarily that you have flaky code, but that you expect anyuser to be able to create your objects. A possible alternative would be tostore the data or set some flag in a database, and have a VBS script thatruns as you or as Administrator, wake up every minute and see if there is auser to add; if so, create the stuff. The VBS script would then run as auser with enough privileges to create everything you want to create here.Of course there would sometimes be a lag of up to a minute, between the timethe user entered the data via the ASP page, and when the directory wasactually created and available for use.

A


"scmiles" <sc*****@nospam-dmacc.edu> wrote in message
news:0a****************************@phx.gbl...
I am trying to write an asp or aspx page that will create a virtual ftp directory to the users Active Directory
home directory. That way a user can interact (drag/drop, copy/paste) via IE with folder view for ftp sites.

I have some code, that seems to be "flaky" it works for
me and some others, but not everyone. I really need to
get a stable version. My asp code is below. Having it
in ASP is fine, but it would be a bonus to have a solid ASPX (ASP.net) solution.

There is one issue I have ran into that is pretty
annoying, and I am not sure if it can be fixed or not and that is the security of the virtual directory and file.
I would prefer that when the user is at work on the
network and logged in with their AD account that they
would not be challenged to authenticate, but I could not get the "request.ServerVariables("AUTH_PASSWORD")" method to work unless Basic Authentication is used, requiring
the user to login. I do not know if this can be avoided in ASP.net, but if I can use an aspx page that can get
the password without having to decrypt or whatever that
would be ideal. Anyway, here is the code I have:
------------------------------------------------------- --- -------------------------
<%

strFullUserName = request.ServerVariables("AUTH_USER")
strUserPass = request.ServerVariables("AUTH_PASSWORD")
strWebServer = request.ServerVariables("SERVER_NAME")
strWebServerIP = request.ServerVariables("LOCAL_ADDR")

'Split domain and username

strUserDomain = strFullUserName
strUserDomain = Mid (strFullUserName, 1, Instr
(strFullUserName, "\")-1)
strUserDomainLength = len(strUserDomain)
strFullUserNameLength = Len(strFullUserName)
strUserName = Right (strFullUserName,
strFullUserNameLength - strUserDomainLength -1)

Set objUser = GetObject("WinNT://" & strUserDomain & "/" & strUserName, user)
strUserHome = objUser.homeDirectory

strVD = "ftp://" & strWebServer & "/"
On Error Resume Next

Set IISOBJ = GetObject
("IIS://Localhost/MSFTPSVC/1/Root")
Set NewDir = IISOBJ.Create("IIsFtpVirtualDir",
strUserName)

Error.Number = 0
NewDir.Path = strUserHome
NewDir.AccessRead = True
NewDir.AccessWrite = True
NewDir.UNCUserName = strfullUserName
NewDir.UNCPassword = strUserPass
NewDir.SetInfo
Set NewDir=Nothing
Set IISObJ=Nothing
Response.Redirect( "ftp://testportal" )
'response.write ("Your P Drive Was Mapped
Successfully!"& "<a href=""ftp://testportal/"">Click
Here</a><br>")

%>

.

Jul 19 '05 #4
Please look at my code, this is what I am doing already,
programatically.
-----Original Message-----
An FTP site?? FTP Servers don't do ASP.

An FTP Server will automatically dump a user into a folder if there isa folder that matches their username. Just create a virtual folderthat is the same folder name as the username. Then point it towhatever in the file system location you want it to be. When the userlogs in as the particular user name it will auotmatically dump them inthe right folder.

Example:

User name: JSmith

Virtual Directory: JSmith
Virtual Directory Physical Path: "C:\where\ever\the\files\are\"Virtual Directory Logical Path: ftp://servername/jsmith

When user connect to it as JSmith they are automatically dumped intothier proper folder. It might be their "ROOT" so it may only show upas "ftp://servername", but I don't remember for sure. Just have themupload a file, then you go look for it and see where it ended up.

--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com

"scmiles" <sc*****@nospam-dmacc.edu> wrote in message
news:0a****************************@phx.gbl...
I am trying to write an asp or aspx page that will create a virtual ftp directory to the users Active Directory
home directory. That way a user can interact (drag/drop, copy/paste) via IE with folder view for ftp sites.

I have some code, that seems to be "flaky" it works for
me and some others, but not everyone. I really need to
get a stable version. My asp code is below. Having it
in ASP is fine, but it would be a bonus to have a solid ASPX (ASP.net) solution.

There is one issue I have ran into that is pretty
annoying, and I am not sure if it can be fixed or not and that is the security of the virtual directory and file.
I would prefer that when the user is at work on the
network and logged in with their AD account that they
would not be challenged to authenticate, but I could not get the "request.ServerVariables("AUTH_PASSWORD")" method to work unless Basic Authentication is used, requiring
the user to login. I do not know if this can be avoided in ASP.net, but if I can use an aspx page that can get
the password without having to decrypt or whatever that
would be ideal. Anyway, here is the code I have:
------------------------------------------------------- --- -------------------------
<%

strFullUserName = request.ServerVariables("AUTH_USER")
strUserPass = request.ServerVariables("AUTH_PASSWORD")
strWebServer = request.ServerVariables("SERVER_NAME")
strWebServerIP = request.ServerVariables("LOCAL_ADDR")

'Split domain and username

strUserDomain = strFullUserName
strUserDomain = Mid (strFullUserName, 1, Instr
(strFullUserName, "\")-1)
strUserDomainLength = len(strUserDomain)
strFullUserNameLength = Len(strFullUserName)
strUserName = Right (strFullUserName,
strFullUserNameLength - strUserDomainLength -1)

Set objUser = GetObject("WinNT://" & strUserDomain & "/" & strUserName, user)
strUserHome = objUser.homeDirectory

strVD = "ftp://" & strWebServer & "/"
On Error Resume Next

Set IISOBJ = GetObject
("IIS://Localhost/MSFTPSVC/1/Root")
Set NewDir = IISOBJ.Create("IIsFtpVirtualDir",
strUserName)

Error.Number = 0
NewDir.Path = strUserHome
NewDir.AccessRead = True
NewDir.AccessWrite = True
NewDir.UNCUserName = strfullUserName
NewDir.UNCPassword = strUserPass
NewDir.SetInfo
Set NewDir=Nothing
Set IISObJ=Nothing
Response.Redirect( "ftp://testportal" )
'response.write ("Your P Drive Was Mapped
Successfully!"& "<a href=""ftp://testportal/"">Click
Here</a><br>")

%>

.

Jul 19 '05 #5
IUSR_yourmachine is NOT in the everyone group for the domain!!!!!!!

"scmiles" <an*******@discussions.microsoft.com> wrote in message
news:00****************************@phx.gbl...
For testing purposes, the Everyone group has permissions
to the create the VD they need in the metabase.
-----Original Message-----
Connecting to LDAP, IIS, etc. is not going to work for

authenticated users
that are 'peons'... they must be members of certain

privilege groups in
order to create an IIS application; for example, guests

and domain users do
not have this privilege.

So, this isn't necessarily that you have flaky code, but

that you expect any
user to be able to create your objects. A possible

alternative would be to
store the data or set some flag in a database, and have

a VBS script that
runs as you or as Administrator, wake up every minute

and see if there is a
user to add; if so, create the stuff. The VBS script

would then run as a
user with enough privileges to create everything you

want to create here.
Of course there would sometimes be a lag of up to a

minute, between the time
the user entered the data via the ASP page, and when the

directory was
actually created and available for use.

A


"scmiles" <sc*****@nospam-dmacc.edu> wrote in message
news:0a****************************@phx.gbl...
I am trying to write an asp or aspx page that will create a virtual ftp directory to the users Active Directory
home directory. That way a user can interact (drag/drop, copy/paste) via IE with folder view for ftp sites.

I have some code, that seems to be "flaky" it works for
me and some others, but not everyone. I really need to
get a stable version. My asp code is below. Having it
in ASP is fine, but it would be a bonus to have a solid ASPX (ASP.net) solution.

There is one issue I have ran into that is pretty
annoying, and I am not sure if it can be fixed or not and that is the security of the virtual directory and file.
I would prefer that when the user is at work on the
network and logged in with their AD account that they
would not be challenged to authenticate, but I could not get the "request.ServerVariables("AUTH_PASSWORD")" method to work unless Basic Authentication is used, requiring
the user to login. I do not know if this can be avoided in ASP.net, but if I can use an aspx page that can get
the password without having to decrypt or whatever that
would be ideal. Anyway, here is the code I have:
------------------------------------------------------- --- -------------------------
<%

strFullUserName = request.ServerVariables("AUTH_USER")
strUserPass = request.ServerVariables("AUTH_PASSWORD")
strWebServer = request.ServerVariables("SERVER_NAME")
strWebServerIP = request.ServerVariables("LOCAL_ADDR")

'Split domain and username

strUserDomain = strFullUserName
strUserDomain = Mid (strFullUserName, 1, Instr
(strFullUserName, "\")-1)
strUserDomainLength = len(strUserDomain)
strFullUserNameLength = Len(strFullUserName)
strUserName = Right (strFullUserName,
strFullUserNameLength - strUserDomainLength -1)

Set objUser = GetObject("WinNT://" & strUserDomain & "/" & strUserName, user)
strUserHome = objUser.homeDirectory

strVD = "ftp://" & strWebServer & "/"
On Error Resume Next

Set IISOBJ = GetObject
("IIS://Localhost/MSFTPSVC/1/Root")
Set NewDir = IISOBJ.Create("IIsFtpVirtualDir",
strUserName)

Error.Number = 0
NewDir.Path = strUserHome
NewDir.AccessRead = True
NewDir.AccessWrite = True
NewDir.UNCUserName = strfullUserName
NewDir.UNCPassword = strUserPass
NewDir.SetInfo
Set NewDir=Nothing
Set IISObJ=Nothing
Response.Redirect( "ftp://testportal" )
'response.write ("Your P Drive Was Mapped
Successfully!"& "<a href=""ftp://testportal/"">Click
Here</a><br>")

%>

.

Jul 19 '05 #6
Unless "yourmachine" is a DC.

Ray at work

"Aaron Bertrand - MVP" <aa***@TRASHaspfaq.com> wrote in message
news:et*************@TK2MSFTNGP10.phx.gbl...
IUSR_yourmachine is NOT in the everyone group for the domain!!!!!!!

Jul 19 '05 #7
> Unless "yourmachine" is a DC.

I don't know of too many DCs that are running ASP applications. Certainly
not where I would be running it, and certainly doesn't sound like a
foolproof way of "securing" the server...
Jul 19 '05 #8
I don't know of many either. It's a bad idea, imo. But, I just wanted to
throw in the exception to the rule.

Ray at work

"Aaron Bertrand - MVP" <aa***@TRASHaspfaq.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl...
Unless "yourmachine" is a DC.


I don't know of too many DCs that are running ASP applications. Certainly
not where I would be running it, and certainly doesn't sound like a
foolproof way of "securing" the server...

Jul 19 '05 #9
"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in
message news:ub**************@tk2msftngp13.phx.gbl...
Unless "yourmachine" is a DC.


I think even then I don't think it is in the Everyone Group although
it would be a Domain Account. I wouldn't swear to it, but that is how
I think it is.

--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com
Jul 19 '05 #10
I just looked at the iusr domain account that exists in my domain. (I HAVE
NOTHING TO DO WITH THE FACT THAT IIS IS INSTALLED ON OUR DCS!)

ifmember /verbose /list OUR_DOMAIN_NAME\iusr_OUR_DC_NAME
User is a member of group OUR_DOMAIN_NAME\Domain Admins. <--- NICE!!
User is a member of group \Everyone.
User is a member of group BUILTIN\Administrators.
User is a member of group BUILTIN\Users.

--SOME OTHERS

So, it is part of everyone. And thanks to this post, I now see that some
brilliant coworker put this user in domain admins... I'll have to find out
what's up with that. Thanks!

Ray at work

"Phillip Windell" <pwindell{at}wandtv*d0t*com> wrote in message
news:%2****************@TK2MSFTNGP12.phx.gbl...
"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in
message news:ub**************@tk2msftngp13.phx.gbl...
Unless "yourmachine" is a DC.


I think even then I don't think it is in the Everyone Group although
it would be a Domain Account. I wouldn't swear to it, but that is how
I think it is.

--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com

Jul 19 '05 #11
I apologize. This is wrong. This is my group listing. Oops. But, here is
the correct response. The user IS a member of everyone.
showgrps /a OUR_DOMAIN_NAME\iusr_OUR_DC_NAME

User: [OUR_DOMAIN_NAME\iusr_OUR_DC_NAME], is a member of:

\Everyone


Ray at work

"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in message
news:uW*************@tk2msftngp13.phx.gbl...
I just looked at the iusr domain account that exists in my domain. (I HAVE NOTHING TO DO WITH THE FACT THAT IIS IS INSTALLED ON OUR DCS!)

ifmember /verbose /list OUR_DOMAIN_NAME\iusr_OUR_DC_NAME
User is a member of group OUR_DOMAIN_NAME\Domain Admins. <--- NICE!!
User is a member of group \Everyone.
User is a member of group BUILTIN\Administrators.
User is a member of group BUILTIN\Users.

--SOME OTHERS

So, it is part of everyone. And thanks to this post, I now see that some
brilliant coworker put this user in domain admins... I'll have to find out what's up with that. Thanks!

Ray at work

"Phillip Windell" <pwindell{at}wandtv*d0t*com> wrote in message
news:%2****************@TK2MSFTNGP12.phx.gbl...
"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in
message news:ub**************@tk2msftngp13.phx.gbl...
Unless "yourmachine" is a DC.


I think even then I don't think it is in the Everyone Group although
it would be a Domain Account. I wouldn't swear to it, but that is how
I think it is.

--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com


Jul 19 '05 #12
OK..
"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in
message news:ua**************@TK2MSFTNGP12.phx.gbl...
I apologize. This is wrong. This is my group listing. Oops. But, here is the correct response. The user IS a member of everyone.
showgrps /a OUR_DOMAIN_NAME\iusr_OUR_DC_NAME

User: [OUR_DOMAIN_NAME\iusr_OUR_DC_NAME], is a member of:

\Everyone


Ray at work

"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in message news:uW*************@tk2msftngp13.phx.gbl...
I just looked at the iusr domain account that exists in my domain. (I
HAVE
NOTHING TO DO WITH THE FACT THAT IIS IS INSTALLED ON OUR DCS!)

ifmember /verbose /list OUR_DOMAIN_NAME\iusr_OUR_DC_NAME
User is a member of group OUR_DOMAIN_NAME\Domain Admins. <---
NICE!! User is a member of group \Everyone.
User is a member of group BUILTIN\Administrators.
User is a member of group BUILTIN\Users.

--SOME OTHERS

So, it is part of everyone. And thanks to this post, I now see that some brilliant coworker put this user in domain admins... I'll have

to find out
what's up with that. Thanks!

Ray at work

"Phillip Windell" <pwindell{at}wandtv*d0t*com> wrote in message
news:%2****************@TK2MSFTNGP12.phx.gbl...
"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in
message news:ub**************@tk2msftngp13.phx.gbl...
> Unless "yourmachine" is a DC.

I think even then I don't think it is in the Everyone Group although it would be a Domain Account. I wouldn't swear to it, but that is how I think it is.

--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com



Jul 19 '05 #13
> I apologize. This is wrong.

I was going to say, if he were a member of domain admins, then the whole
setup is sketchy, because someone must have purposely done that.
Jul 19 '05 #14
It would not surprise me where I work. I see random users in the domain
admins group all the time. "Oh, so and so needed permissions to install a
program, so I put him in the domain admins group so he'd have admin rights
on the local workstation." "Why didn't you at least just add him only to
the local admin group on his machine." "How do I do that?" Nice.

Ray at work

"Aaron Bertrand - MVP" <aa***@TRASHaspfaq.com> wrote in message
news:ep*************@TK2MSFTNGP11.phx.gbl...
I apologize. This is wrong.


I was going to say, if he were a member of domain admins, then the whole
setup is sketchy, because someone must have purposely done that.

Jul 19 '05 #15
> on the local workstation." "Why didn't you at least just add him only to
the local admin group on his machine." "How do I do that?" Nice.


And we wonder why half of the jobs in the IT industry are being outsourced
to India.
Jul 19 '05 #16

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
by: Ed | last post by:
Hello All, I posted earlier about a problem I was having with editing or pasting/deleting files in the "Home Directory" of my web server. I just noticed that the "Home Directory" option in the...
4
by: Krunom Ancini | last post by:
Hi, all stuff works fine if i define absolute paths but with relative i have some problems: i defined my at Internet Information Services (IIS) home directory of my "default web site" and I...
6
by: Hemant Shah | last post by:
Folks, I need to move HOME directory of an instance to another directory. What is the best way of doing it? Is changing password file enough? or dies DB2 store this info in it's own config? ...
2
by: Danny Miller | last post by:
Hi there, I'm facing a problem that is driving me nuts. The scenario is as follows: 1) Create an empty directory structure e.g. C:\Dev1\TestWebApp 2) Map a virtual directory e.g. TestWebApp...
6
by: Michael Tissington | last post by:
I'm trying to add some extensions to IIS on the properties, home directory, config screen. I must be missing something because the OK button is always disabled ... Any ideas please ? --...
2
by: Jim in Arizona | last post by:
My goal, somehow, is to populate a dropdownlist with all the user names in active directory. I don't even know where to begin, really. I added a reference to System.DirectoryServices so I could...
2
by: deko | last post by:
I have files on my Apache web server that are NOT in publicly accessible space. I want to make these files available for download only to authenticated users. I currently use a download script...
3
by: anthriksh2000 | last post by:
Hi, I want to have a image which has 4 people in it and i wnat that it should have image mapping. and when a particulat person is clicked upon in that image it should open a corresponding person...
6
by: lawpoop | last post by:
I'm working on a PHP site and I have my database password file behind the server root directory. I can reference the password file by include("../ database_password.inc.php"), but I would like...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.