Groups | Blog | Home
all groups > iis security > august 2007 >

iis security : FrontPage User Logins


Marty Shifflett
8/13/2007 8:08:02 AM
Okay I am not sure why I can't figure this out, but it has been a long time
since I had to set up any users for FrontPage authoring of web sites. I have
a web site running in IIS 6.0 on a Windows 2003 Server. I have configured
the Server Extensions 2002 for the site and can log in remotely via FrontPage
as administrator, or anyone in the administrators group. When I create a new
user in the Active Directory and set the permissions on the site for them in
IIS, I cannot log in via FrontPage. Am I missing something here?

Thanks,
Roger Abell [MVP]
8/13/2007 10:58:30 PM
The domain accounts need permissions on the content (which the
FPSE '02 probably generously over allotted) and log on rights to
the machine (what groups have local login, and what domain
groups are in them?).

"Marty Shifflett" <MartyShifflett@discussions.microsoft.com> wrote in
message news:B49BBA92-B2DD-4806-8AB4-79930D1C649B@microsoft.com...
[quoted text, click to view]

Marty Shifflett
8/14/2007 1:58:02 AM
Ahhh, that's right. They have to have log on locally rights to the machine
before they can log in to the web site via FrontPage. I will set up a new
group just for that pupose and give it that right. That should take care of
it, correct?

[quoted text, click to view]
Marty Shifflett
8/14/2007 6:54:02 AM
I created a new global security group called "Web Authors" and put the user
in question in that group. I went in and edited the Default Domain
Controllers Policy and added that new group to the "Allow log on locally"
policy in the User Rights Assignment section. I still cannot log on via
FrontPage as that user. Any ideas?

[quoted text, click to view]
Roger Abell [MVP]
8/14/2007 9:52:43 AM
This IIS instance is on a domain controller ??
What do you show in the security event log for the failure ?
(I am assuming that viewing the FPSE grants in the Sharepoint
admin page it looks correct).

"Marty Shifflett" <MartyShifflett@discussions.microsoft.com> wrote in
message news:4C204538-31CA-4A85-8337-0F82D0A673D8@microsoft.com...
[quoted text, click to view]

Marty Shifflett
8/14/2007 11:46:04 AM
I get an event 680 logon attempt, then an event 540 successful logon, and
then an event 538 user logoff.

The login box then comes back and asks for credentials again.

[quoted text, click to view]
Marty Shifflett
8/14/2007 11:50:02 AM
Yes it is running on a domain controller. The only other box that I could
put it on right now that isn't a DC would be the Exchange server.

[quoted text, click to view]
Roger Abell [MVP]
8/14/2007 5:58:17 PM
Well, that makes it sound like the NTFS permissions are not
correct on the content as the account is logging in, or perhaps
the _vti_bin virtual directory is not defined for the web.

You could address that via use of the FPSE check/fix option,
by placing an audit for Everyone Full Fail on the content and
see what shows up in the event log, and/or by looking in the
IIS webserver log.

Roger

"Marty Shifflett" <MartyShifflett@discussions.microsoft.com> wrote in
message news:29CD4B1A-C99E-4254-8C06-080F57E06E15@microsoft.com...
[quoted text, click to view]

Marty Shifflett
8/14/2007 6:10:01 PM
I will try that and see what happens.

[quoted text, click to view]
AddThis Social Bookmark Button