IIS prompt for domain userid after server is hardened -- iis security

Bernard Cheah [MVP]
8/9/2007 12:00:00 AM

Because with local admin rights - the iusr has sufficient permissions to
access the resource.
You should remove the iusr from admin group, then get filemon / regmon to
trace where iusr is facing access issue.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/

[quoted text, click to view]

newbie NO[at]SPAM work
8/9/2007 7:50:07 AM

Thanks..

I am wondering if I revert back the security settings, would it help to fix
the problem.

--
Time 4 a break

[quoted text, click to view]

Roger Abell [MVP]
8/9/2007 9:40:38 AM

[quoted text, click to view]

Well, if it worked before and you really did revert (actually get back
to where it was) then one would expect it to work again.

However, you will likely have a very hard time actually reverting, at
least if you did force the permissions you outlined on those directories
and their content. For example, the settings within C:\winnt in a default
setup are rather varied, not uniform.
Also, I do not know where you got the idea that setting permissions as
indicated on the folders listed, but it was not a good idea, and in the case
of repair and config actually would have weakened rather than hardened
a post NT4 system (since you have winnt dir I must assume this is older
or upgrade newer, so your changes may have been for the better but all
depending on what the initial values were).

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis security

iis security : IIS prompt for domain userid after server is hardened