Groups | Blog | Home
all groups > iis security > november 2003 >

iis security : Authentication problem


PL
11/27/2003 4:26:53 PM

I'm having a problem authenticating through IIS 6 and I cannot
figure out what the problem is.

I have created a user group called OfficeAdmins, all members
of this group should have access to the admin folder I placed on
the server.

I removed the IUSR permissions on this folder and added the permissions
for the OfficeAdmin group, then I removed the "allow anonymous access"
for that dir in IIS and selected "integrated windows authentication" and
"basic authentication" schemas.

I also made sure we require secure channel in case for some reason
the basic authentication would be selected when authenticating.

I added the users that should have access to the OfficeAdmin group,
however, it doesnt work, all I get is three login screens before it says
I don't have access when I try to login.

The weird part is that if use the Administrator account I can login,
however none of the OfficeAdmin user accounts work.

I checked and rechecked the permissions on the folder and the settings in IIS,
what am I missing here ??

PL.


PL
11/28/2003 11:17:19 AM
[quoted text, click to view]

It's a workgroup and liek the other post you answered static html
pages seem to work fine but not accessing asp pages.

[quoted text, click to view]

I have never understood how to read those entries, they give absolutely
no clues as to why it fails, jsut that it does fail.

PL.

PL
11/28/2003 1:11:32 PM

The solution was simple, add read and execute rights for the OfficeAdmin group on global.asa

PL.

Ken Schaefer
11/28/2003 5:21:30 PM
Is this in a Domain or workgroup?

If it's a domain, are the users specifying Domain\Username?

What's in the Windows Event Logs? (you should be auditing failed logon
attempts, so you can see who the server thinks is trying to logon, and why
the logon is failing). If it's a local account, it'll be recorded in the
webserver's event log. Domain logon failures should be logged in the Domain
Controller's event log.

Cheers
Ken

[quoted text, click to view]
:
: I'm having a problem authenticating through IIS 6 and I cannot
: figure out what the problem is.
:
: I have created a user group called OfficeAdmins, all members
: of this group should have access to the admin folder I placed on
: the server.
:
: I removed the IUSR permissions on this folder and added the permissions
: for the OfficeAdmin group, then I removed the "allow anonymous access"
: for that dir in IIS and selected "integrated windows authentication" and
: "basic authentication" schemas.
:
: I also made sure we require secure channel in case for some reason
: the basic authentication would be selected when authenticating.
:
: I added the users that should have access to the OfficeAdmin group,
: however, it doesnt work, all I get is three login screens before it says
: I don't have access when I try to login.
:
: The weird part is that if use the Administrator account I can login,
: however none of the OfficeAdmin user accounts work.
:
: I checked and rechecked the permissions on the folder and the settings in
IIS,
: what am I missing here ??
:
: PL.
:
:
:

AddThis Social Bookmark Button