| Groups | Blog | Home |
iis security : Anonymous Access Fails with IIS 5.1 and Windows XP Pro
Hello all... I have Windows XP Pro installed along with IIS 5.1 that came with the XP Pro CD. I can access the default webpages that came with IIS 5.1 just fine at the following address after IIS installation: http://localhost/localstart.asp But when I try to do it with my domain name, well it keeps asking me for a password, thus not making my site truely anonymous. I think it might have something to do with NTFS settings in the wwwroot directory...but I am not sure how to change these settings. I have the directory marked as web sharable...but that still does not work. I also have IIS Lockdown installed and MBSA V1.2.1 installed as well. I also removed Mcafee Privacy Services as well since it is not compatible with IIS. I am so close to making this work, but this anonymous access thing is what is getting me stuck at the moment. Also, please note that I got Apache to install and serve up my pages just fine...but I can't use it since I need to use ASP .NET services. Currently, my apache server is off while I am using IIS. Any comments would be greatly appreciated.
You may have selected the wrong IIS Lockdown setting for the IUSR account.
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q323640#6 [quoted text, click to view] "john.w.blair@gmail.com" wrote:
> > Hello all... > > I have Windows XP Pro installed along with IIS 5.1 that came with the > XP Pro CD. I can access the default webpages that came with IIS 5.1 > just fine at the following address after IIS installation: > > http://localhost/localstart.asp > > But when I try to do it with my domain name, well it keeps asking me > for a password, thus not making my site truely anonymous. I think it > might have something to do with NTFS settings in the wwwroot > directory...but I am not sure how to change these settings. I have the > directory marked as web sharable...but that still does not work. I also > have IIS Lockdown installed and MBSA V1.2.1 installed as well. > > I also removed Mcafee Privacy Services as well since it is not > compatible with IIS. I am so close to making this work, but this > anonymous access thing is what is getting me stuck at the moment. > > Also, please note that I got Apache to install and serve up my pages > just fine...but I can't use it since I need to use ASP .NET services. > Currently, my apache server is off while I am using IIS. > > Any comments would be greatly appreciated. >
I want ananymous access and I would to be able to have anyone from the
internet to access my site. Thus, I want the user login prompt to go away.
[quoted text, click to view]
<john.w.blair@gmail.com> wrote in message news:1108616422.261420.148390@l41g2000cwc.googlegroups.com... > > Hello all... > > I have Windows XP Pro installed along with IIS 5.1 that came with the > XP Pro CD. I can access the default webpages that came with IIS 5.1 > just fine at the following address after IIS installation: > > http://localhost/localstart.asp > > But when I try to do it with my domain name, well it keeps asking me > for a password, thus not making my site truely anonymous. I think it > might have something to do with NTFS settings in the wwwroot > directory...but I am not sure how to change these settings. I have the > directory marked as web sharable...but that still does not work. I also > have IIS Lockdown installed and MBSA V1.2.1 installed as well. > > I also removed Mcafee Privacy Services as well since it is not > compatible with IIS. I am so close to making this work, but this > anonymous access thing is what is getting me stuck at the moment. > > Also, please note that I got Apache to install and serve up my pages > just fine...but I can't use it since I need to use ASP .NET services. > Currently, my apache server is off while I am using IIS. > > Any comments would be greatly appreciated. It's not clear - do you want to allow anonymous access?
Okay, I am running XP Pro with IIS 5.1 with the folliwing settings:
1. Anonymous Access IS enabled 2. Permissions for "wwwroot" folder C:\Inetpub\wwwroot for ISUR_MachineName have been set to: a. Read and Execute b. List Folder Contents c. Read 3. "wwwroot" is "Web Shared" 4. IIS is set to use my IP address currently given to my computer (IP address has been verified as stable and valid) Is this setting the NTFS permissions correctly? After doing all this, I still have the login screen... So, how can I make this login screen go away so that everyone can see it?
then make sure iusr_computername account has at least READ NTFS permission
on the files. -- Regards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] <john.w.blair@gmail.com> wrote in message news:1108843772.067860.115520@z14g2000cwz.googlegroups.com... >I want ananymous access and I would to be able to have anyone from the > internet to access my site. Thus, I want the user login prompt to go > away. >
Ok that worked...
Both of these work. I created the first one and installed the second http://jwblair.redirectme.net/Hello/index.html http://jwblair.redirectme.net/SearcharooToo/SearcharooToo.aspx However, This does not work. The was created by the ASP .NET SDK 1.1 installation. It has working examples and what not. It works on localhost but it can not be published. http://localhost/quickstart/ASPPlus/ So why does the two work and the other one does not? What is going on here?
I hope I posted the correct failing link. it was...
http://jwblair.redirectme.net/quickstart/ASPPlus/ It says I am not authorized....how can I get rid of the 403.6 error?
Please see my last post. I dont get a login prompt with this site:
http://jwblair.redirectme.net/quickstart/ASPPlus/ Just a 403.6 error....how can I fix this?
Ok. try a hello.html, same thing ?
if you still get the login prompt, get filemon from sysinternals.com and trace the access error. -- Regards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] <john.w.blair@gmail.com> wrote in message news:1108872314.029540.39620@z14g2000cwz.googlegroups.com... > Okay, I am running XP Pro with IIS 5.1 with the folliwing settings: > 1. Anonymous Access IS enabled > 2. Permissions for "wwwroot" folder C:\Inetpub\wwwroot for > ISUR_MachineName > have been set to: > a. Read and Execute > b. List Folder Contents > c. Read > 3. "wwwroot" is "Web Shared" > 4. IIS is set to use my IP address currently given to my computer (IP > address has been verified as stable and valid) > > Is this setting the NTFS permissions correctly? > > After doing all this, I still have the login screen... So, how can I > make > this login screen go away so that everyone can see it? >
define "doesn't work"
login prompt ? if yes, have to try filemon to trace ? if other error, post the error msgs here. -- Regards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] <john.w.blair@gmail.com> wrote in message news:1108964825.055263.96650@z14g2000cwz.googlegroups.com... > Ok that worked... > > Both of these work. I created the first one and installed the second > > http://jwblair.redirectme.net/Hello/index.html > http://jwblair.redirectme.net/SearcharooToo/SearcharooToo.aspx > > However, This does not work. The was created by the ASP .NET SDK 1.1 > installation. It has working examples and what not. It works on > localhost but it can not be published. > > http://localhost/quickstart/ASPPlus/ > > So why does the two work and the other one does not? > > What is going on here? >
ha! then go to the virtual directory, make sure the IP restriction doesn't
block you ip address. HOW TO: Restrict Site Access by IP Address or Domain Name http://support.microsoft.com/?id=324066 it is stated there- 403.6 - IP rejected. hang! but this is XP Pro IIS5.1, this feature is not available for XP. ok, when you try the above and the button is disabled, then try this tool HOW TO: Download, Install, and Remove the IIS MetaEdit 2.2 Utility http://support.microsoft.com/?id=232068 run it, fine the lmhost/w3svc/1/ the virtual directory, see if can find any ip address list there. -- Regards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] <john.w.blair@gmail.com> wrote in message news:1108965599.102655.163080@z14g2000cwz.googlegroups.com... >I hope I posted the correct failing link. it was... > > http://jwblair.redirectme.net/quickstart/ASPPlus/ > > It says I am not authorized....how can I get rid of the 403.6 error? >
did you read this ?
-------------- ha! then go to the virtual directory, make sure the IP restriction doesn't block you ip address. HOW TO: Restrict Site Access by IP Address or Domain Name http://support.microsoft.com/?id=324066 it is stated there- 403.6 - IP rejected. hang! but this is XP Pro IIS5.1, this feature is not available for XP. ok, when you try the above and the button is disabled, then try this tool HOW TO: Download, Install, and Remove the IIS MetaEdit 2.2 Utility http://support.microsoft.com/?id=232068 run it, fine the lmhost/w3svc/1/ the virtual directory, see if can find any ip address list there. -- Regards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] <john.w.blair@gmail.com> wrote in message news:1108999131.573175.82720@z14g2000cwz.googlegroups.com... > Please see my last post. I dont get a login prompt with this site: > > http://jwblair.redirectme.net/quickstart/ASPPlus/ > > Just a 403.6 error....how can I fix this? >
THanks it works NoW!
Don't see what you're looking for? Try a search.
|
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |