kelmen@hotmail.com (Kelmen Wong) wrote in message news:<843f541b.0411100158.7a8725a9@posting.google.com>...
> Greeting,
>
> We have an IIS 5 web app in dev, 2 sites, both also using secured
> (SSL). They refering to same physical folder. 2nd site certificate is
> bit special, required smartcard.
>
> Both web app (sites) settings are identically same, except the 1st
> is using "Script & Executable" permission while 2nd only "Script".
> Some of the folders are using a domain account as anonymous access. So
> far (in past) so good, they behaved as expected.
>
> This web server is belong to a domain, with partial communication
> allowed to the domain controller (blocked by firewall or closed,
> whatever). There are the "unable to locate DMC" of NetLogon in the
> event log once awhile, no big deal.
>
> However nowaday, the 2nd site giving "Access is Denied" error from
> those anonymous access using domain account. Below are the findings:
> - HTTP 401.5 in IIS log
> - W2SVC logged bad username or password of that particular account.
> - BUT 1st site with the same setting (except the special cert) behaved
> no problem!
>
> The 2nd site been deployed a renewed cert, that's the changes we
> awared.
> And the worst is nobody know the password for that domain account
> anymore.
>
> We tried "Allow IIS to control password", same result.
>
> We don't want to reset pwd, it will break many things.
>
> Anyone familiar with such problem? Any idea or suggestion to resolve