all groups > iis security > november 2005 >
You're in the

iis security

group:

Basic IIS authentication only works with administrator account



Basic IIS authentication only works with administrator account Joemtz
11/28/2005 1:49:06 PM
iis security: Hey everyone,

I'm familiar working with Windows 2k Servers. I restrict access to virtual
directories or websites either by uncheking the "allow anonymous" or
adjusting ACL's on the folder where the website is. Then asign a standard
user account to those ACL's.

Problem is that since I upgrated to Windows 2003 server (stand alone, clean
install), i'm unable to use a standard account to authenticate to this
websites. While checking the event viewer I get a "user/pass incorrect". The
exception to this is using an administrator acount to login, that for obvious
reasons, feels rather unconfortable to do that.

I tried a Power User account and failed to authenticate too.
Any suggestions?

RE: Basic IIS authentication only works with administrator account DaveG
12/1/2005 3:15:03 PM
You mentionned your IIS is a stand alone machine, meaning not joined to a
domain? In that case, it would be normal (I think) that only local accounts
could authenticate therefore only Administrator...
Try creating a local user and test the authentication with that user. If the
IIS should remain stand alone, a Radius server could pass the authentication
to a domain.

Dave.


[quoted text, click to view]
RE: Basic IIS authentication only works with administrator account Joemtz
12/1/2005 9:49:02 PM
Hi Dave, thank you for answering.

The scenario for this is basically a windows xp user from the internet,
authenticating to the IIS server(stand alone) to access a virtual directory
on a website.
The IIS server is configured not to accept anonymous requests and "basic
authentication(clear text) is selected.

I created a test user account with standard user privileges and when
prompted for a user name and password(through Internet explorer), I get an
"access denied" (Even with the appropiate ACLS - full access- for the
physical folder of the test user)

If instead I use an administrator account to login to the same virtual
directory, i get through with no problem.

I hope my question is clearer.
Thanks again.


[quoted text, click to view]
RE: Basic IIS authentication only works with administrator account DaveG
12/5/2005 10:17:02 AM
Have you tried to authenticate as the test user by adding either the domain
or machine name in fron of the account (domain\username or
machinename\username)?
Sometimes this is required.

Dave.

[quoted text, click to view]
AddThis Social Bookmark Button