RE: [ActiveDir] OT: SUS on a W2K DC

Wed, 15 Oct 2003 08:42:09 -0700

Title: Message
Mark,
 
Maybe I'm being obtuse, but what leads you to believe that they don't exist locally?  Simply because there is no local SAM to create the account in?  The domain has an Administrator account, which resides in Active Directory.  Where would the IUSR and IWAM accounts reside if you install IIS on a particular DC?  It would reside in the Users container in AD, and the name would be IUSR_<machine-name> and IWAM_<machine-name>.
 
The concern for installing SUS on a DC is because of the IIS requirements, IMHO.  IIS on a DC is a prelude to disaster.  You might as well hang out a 'Hackers welcome!" sign and not bother to lock down the DC.
 

Rick Kingslan  MCSE, MCSA, MCT
Microsoft MVP - Active Directory
LAN Administration - Windows 2000
West Corporation
[EMAIL PROTECTED]

-----Original Message-----
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003 10:18 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT: SUS on a W2K DC

thanks..
 
i realise my problem is more with IIS (which uses the IUSR and IWAM accounts). MS recommends not to install IIS on a DC but I assume if you have to you can...but how do you get around the IUSR and IWAM accounts not existing locally problem ?
 
I apologise for being SO OT :-)
 
-----Original Message-----
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 15. Oktober 2003 17:10
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT: SUS on a W2K DC

-----Original Message-----
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003 11:01 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] OT: SUS on a W2K DC

Can anyone tell me where i might find a good maillist for SUS problems.
 
I want to know how to install it on a DC. My problem is that the built in acounts found on non DC servers "IUSR" and "IWAM" are not available on a DC (not having local users and groups)
 
So how do I get round this problem ?!?
 
Been surfing all afternoon and come up with nada.
 
Many thanks,
 
Mark

Reply via email to