Groups | Blog | Home
all groups > iis security > july 2005 >

iis security : WSUS Security Nightmare



Wknight
7/25/2005 5:44:02 AM
Hello

I've installed WSUS over our Windows 2003 DC. Until now WSUS is being unable
to contact the selfupdate folder which is causing that the WSUS stop
responding. The error that I'm getting is a 401 (authentication). In the WSUS
log there are many entries which show that the application retries to access
the selfupdate folder each five minutes.

If I try to access the WSUS administration virtual folder from any client
over the network the I don't need to send a username and password, but if I
try to access the folder from the server I need to submit a username and
password, and if I reset the secutiry option to allow any IUSR_WSUS request
I'm getting a 401.

I tried to change all the security parameters on the IIS but nothing seems
to let me access the WSUS folders from the same server without using a
network account.

How can I set up IIS 6.0 to allow me to access the WSUS folders from the
same server anonymously?

diop
7/26/2005 1:07:55 AM
Put yourself to the wsus administrators group see computer management
(local) of your wsus server- local users and Groups - Groups
Wknight
7/26/2005 5:03:04 AM
I already did it with not success.

Thanks anyway

[quoted text, click to view]
Wknight
7/26/2005 6:11:02 AM
As always happens, the answer is more simple than the question.

The problem was the password for IUSR_WSUS. Some virtual folders had an
older password. That never affect the operation of the site until WSUS was
installed.

Thanks



[quoted text, click to view]
AddThis Social Bookmark Button