iis security: I am a complete novice who is trying to set up IIS on Win2k Server to
do some testing. I have created a test page named index.html and put it
in wwwroot. The machine name is TestServer. When I enter
http://testserver in IE on TestServer I get the error "You are not
authorized to view this page". If I go to another machine on the LAN
and enter the same URL I get "Directory Listing Denied".

I changed the home directory to another directory and get the same
error. I do have annonymous Access enabled in the IIS Manager. I also
tried changing the user for annonymous login to a user that is an
Administrator and that made no difference.

I am lost. Any help would be appreciated.

--

What happens if you create a page called default.htm? Can you browse that?
And if you go to the web site Properties, Home Directory and check Directory
browing, is there a difference?
Anthony


[quoted text, click to view]

Does making a request to http://testserver/index.html work?

Your problem is most likely because "index.html" is not configured as a
Default Document.

The fix is to either to a configured Default Document, like "default.htm",
or add index.html to be a Default Document.

This URL explains what is going on:
http://blogs.msdn.com/david.wang/archive/2005/10/14/HOWTO_IIS_6_Request_Processing_Basics_Part_1.aspx

Now, your problem can be diagnosed by using the website's log file, which
are located at %systemroot%\System32\LogFiles\W3SVC#\*.log

You will notice that you are getting 403 errors (which are errors in feature
configuration) and not 401 errors (which are errors with user
identity/access). That basically means that your problem has nothing to do
with anonymous access enabled, anonymous user identity, home directory,
etc... so you should be focusing on fixing your server's configuration to
perform the feature that you want.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

[quoted text, click to view]