IIS Server Security >> IIS Security on Windows XP SP2

by Jayme Pechan » Fri, 10 Dec 2004 01:49:37 GMT

I just installed SP2 on my machine and now my web applications don't work.
It says, "
You are not authorized to view this page"
So I add the ASPNET user and IUSR_COMPNAME with explicit permissions to the
directory. I also did the security wizard and selected "Public Site" and
told it to replace permissions. It is set to only allow anonymous access.
Anyone know what else I would be missing here? Thanks.




IIS Server Security >> IIS Security on Windows XP SP2

by David Wang [Msft] » Fri, 10 Dec 2004 14:17:17 GMT


First, undo all your changes. You are currently randomly changing
permissions with no idea what is actually wrong, which can be very dangerous
to the security and operations of your web server.

Then, uncheck IE's "Show Friendly HTTP Errors" option and report the actual
HTTP error code (looks like 403.x), as well as look in the IIS web log for
that failed request for the Win32 error code. We will start there.
Troubleshooting always begins by observing and gathering information about
the initial failure, analyzing it for possibilities, and repeat until a
conclusion is reached. Random guesses based on incomplete information can
lead to faulty conclusions and faulty configuration.


For example:
1. Adding ASPNET user and IUSR_COMPNAME with explicit permissions has
nothing to do with authorization failure. Authorization means that a user
account already authenticated but failed to access for some reason. Adding
additional users has no effect on the authorization of another user -- but
changing the correct user's permissions or authorization criteria will have
an effect.
2. Security Wizard enables Anonymous access, but how are you guaranteed that
the web browser actually use anonymous access?

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//


I just installed SP2 on my machine and now my web applications don't work.
It says, "
You are not authorized to view this page"
So I add the ASPNET user and IUSR_COMPNAME with explicit permissions to the
directory. I also did the security wizard and selected "Public Site" and
told it to replace permissions. It is set to only allow anonymous access.
Anyone know what else I would be missing here? Thanks.






Similar Threads

1. Security settings for cmd access IIS XP Pro SP2

2. Install IIS after installing Windows XP SP2, can't get into IIS MM

3. iis locks DEBUG, VS can't debug on iis, Windows XP SP2,

4. Remoting Hosted on IIS not working windows xp sp2 .net 1.1 vs.net2

5. SQL and IIS with Windows XP SP2 Issues - CSharp/C#

6. Setting up Email in IIS 5.1 for Windows XP pro SP2

Hi I have a Intranet Server, It is Windows XP SP2 and it is running IIS 5.1,

I need to know how to set it up for Outlook Express and so I can have users?
If at all posible it needs to be like a step by step guide.

I will be very greatful,

Thanks in advance - Simon

p.s If i have posted in the wrong place please do tell me...


7. Can't Install IIS on Windows XP SP2

8. How to install IIS on Windows XP SP2