IIS Server Security >> Virtual Directory Access Denied

by bWlrZXZhbmhvZmY » Thu, 03 May 2007 04:43:01 GMT

I have IIS 6 running on a Win2k3 server. A virtual directory has been
created under the default Web Site at "C:\Reports" As an Administrator I
have no problem running the reports. A non Administrator either gets
prompted for a domain user id and password or simply "access denied" The
virtual directory is set for anonymous access as is the virtual directory.
Both have the integrated options checked since this virtual directory is
outside of the default website directory structure. NTFS Persmissions have
been set to allow the domain users group and the IUSR_<machine> Any clues to
what is going on here will be GREATLY appreciated.
Thanks


IIS Server Security >> Virtual Directory Access Denied

by David Wang » Thu, 03 May 2007 16:59:12 GMT


On May 2, 1:43 pm, mikevanhoff < XXXX@XXXXX.COM >



Please help me understand what you are trying to do and the
constraints of any non-IIS software involved.

Can you clarify what you mean by:
1. What action is getting "access denied". What do you mean by
"running the reports" and how do you do that
2. Are you trying to run a program or read a file from the Virtual
Directory
3. What user identity actually has permissions to run the program or
read a file on the server


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//




IIS Server Security >> Virtual Directory Access Denied

by bWlrZXZhbmhvZmY » Thu, 03 May 2007 20:52:03 GMT

Hi David,

This is actually trying to open a Crystal Report. I have set up Crystal
Reports on other Win2k3 server, and do not have this issue. I have triple
checked both the IIS settings and the NTFS settings from one of my other
working installations, I have had no luck see any misconfiguration in these.






Virtual Directory Access Denied

by David Wang » Fri, 04 May 2007 17:24:54 GMT

Then maybe the issue has nothing to do with IIS and is caused by some
other difference between the systems -- perhaps one got "locked down"
and the other did not. There's really no good way to troubleshoot this
situation other than rebuilding or painstaking system comparison. It
is analogous to someone making thousands of random changes on the
system and then asking you to figure them all out - no system makes
this easy.

Try running FileMon and RegMon from www.sysinternals.com to see if
there is unexpected AccessDenied on the server for the non-Admins. It
may shed a clue about the nature of the 401 and where to look next.

Also, check the IIS web log for the exact Win32 error code for the non-
Admin users getting Access Denied. It may shed a clue about the exact
sort of "Access Denied" since as I describe in this blog entry, there
are many types of 401 "Access Denied" which would cause that user
login dialog to pop up.

http://blogs.msdn.com/david.wang/archive/2005/07/14/HOWTO_Diagnose_IIS_401_Access_Denied.aspx


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//







On May 3, 5:52 am, mikevanhoff < XXXX@XXXXX.COM >







Virtual Directory Access Denied

by trungtran61 » Fri, 08 Jun 2007 04:38:26 GMT

n May 4, 2:24 am, David Wang < XXXX@XXXXX.COM > wrote:

The problem is the CR progess dialog:
This works:

http://www.codeguru.com/forum/showthread.php?p=1494595



Virtual Directory Access Denied

by bWlrZXZhbmhvZmY » Fri, 08 Jun 2007 20:37:01 GMT

hanks for the direction. The final resolution was NTFS permissions on the
physical directory. Crystal Web Server 8.5 requires that the
IUSR_MachineName have full control on the physical directory. Not very
secure, but that is how it is set.

Thanks

" XXXX@XXXXX.COM " wrote:



Similar Threads

1. Error creating Virtual Directories - Access Denied

I am having problems creating virutal directories in IIS. 
They get created but are displayed with a RED STOP Icon. 
In the even log there is an entry that says....

====================================================
The server was unable to add the virtual root '/asdf/' 
for the directory 'D:\hosted\MySite\Picts' due to the 
following error: Access is denied.  The data is the error 
code. 
=====================================================

What is going on here. I have checked to make sure that 
the IUSER account has access to the folder that I am 
trying to add. I'm not sure what else to do. Any Ideas?

Any help is greatly appreciated.
-Dan

2. Virtual directory "access denied"

3. access denied error when accessing virtual directories

I created some virtual directories in Internet services 
manager, but when I try to access them through the web, I 
get a 2 line login box and then an Error 403 "you are not 
authorized to view this page". I can access these folders 
on the internal network. They show up in the Internet 
Services Manager just like the Exchange folders. I tried 
with several accounts including administrator with the 
same result. OWA works fine with the same logins. What am 
I missing? I am running Win 2000 SBS w/SP1 and SP3 on the 
Exchange component. 
Thank You

4. virtual directory - access denied - red stop sign - iislockd nonsense => solution

5. Create IIS Virtual Directory on Remote Server - Access Denied

I have scoured the net and the only solution seems to be to spawn a thread
with a user identity that has these rights.
Only problem is that I can't figure out how to do this. Does anyone have an
example to accomplish this.

Thanks in advance.
Brian K. Williams



6. Access Denied creating virtual directory with Internet Service Manager

7. deny access to IIS virtual directory

I'm running Windows Server 2003.

On the IIS server, I have the local path c:\intranetnews shared as a
virtual directory for the active website. 

I have anonymous access enabled for the directory, so that users
aren't prompted for credentials. One global security group, Project
Contractors, is denied access to that directory via NTFS permissions.
Every user can open that portion of the site in IE, including Jay
Adams, who is a member of Project Contractors. Why? 

All I can figure is Jay is being treated as an anonymous user instead
of his logon credentials.

If that's the case, the MSPress MCSE book is wrong. This is part of an
exercise that says that given this configuration, Jay should be denied
access.

Thanks,
Dave

8. access denied when accessing IIS directory