Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > january 2005 >

iis security : IIS and browsing


JJ
1/31/2005 5:13:01 PM
Hi,

When someone from the web visits an IIS website they are given guest
account acccess I would assume? What account is this name under in a w2k3 web
server? How can I give a guest user more rights in IIS?

Thanks,

Jason Brown [MSFT]
2/1/2005 1:22:02 PM
the default IIS guest account is IUSR_MachineName - where MachineName is the
NetBIOS name of the server

you can either give more rights to the user under the account options and/or
machine and grop policies, or preferably you can configure which account is
used by anonymous users under IIS Management->Site Properties->Directory
Security->Anonymous access and authentication control

Be sure not to grant too much access where it's not needed though - it's
posible elevating this account can make security holes in, say, ASP apps far
worse than they would otherwise be.


--
Jason Brown
Microsoft GTSC, IIS

This posting is provided "AS IS" with no warranties, and confers no
rights.

[quoted text, click to view]

AddThis Social Bookmark Button