iis security:
We have a webfarm with 6 webservers. Three of them run Win2k, the other
three have recently been upgraded to Win2k3. After installing windows 2003,
we applied the Windows 2003 Security Guide templates.
(http://www.microsoftcom/downloads/details.aspx?FamilyID=8a2643c1-0685-4d89-b655-521ea6c7b4db&displaylang=en).
Apart from the SMTP service that had to be activated, we use the base and
the IIS template from that package.
Now, after 42 days, we had some troubles with accessibility. Anonymous
access was denied for all websites. Reading the password for the IWAM and
IUSR from the metabase we were able to reset the password for both of them.
Everything worked again. My only problem is now, this will probably happen
again in 40 days.
Can someone point me how to enable the automatic synchronising for the IUSR
and IWAM accounts? I allready tried the following, but that didn't solve it:
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sec_auth_anonauth.asp

Tnx,

Raymond

Enabling subauthentication will mean that the passwords remain synchronised.
Alternatively, set the passwords for the IUSR and IWAM accounts not to
expire.

Cheers
Ken

--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


[quoted text, click to view]
:
: We have a webfarm with 6 webservers. Three of them run Win2k, the other
: three have recently been upgraded to Win2k3. After installing windows
2003,
: we applied the Windows 2003 Security Guide templates.
:
(http://www.microsoftcom/downloads/details.aspx?FamilyID=8a2643c1-0685-4d89-b655-521ea6c7b4db&displaylang=en).
: Apart from the SMTP service that had to be activated, we use the base and
: the IIS template from that package.
: Now, after 42 days, we had some troubles with accessibility. Anonymous
: access was denied for all websites. Reading the password for the IWAM and
: IUSR from the metabase we were able to reset the password for both of
them.
: Everything worked again. My only problem is now, this will probably happen
: again in 40 days.
: Can someone point me how to enable the automatic synchronising for the
IUSR
: and IWAM accounts? I allready tried the following, but that didn't solve
it:
:
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sec_auth_anonauth.asp