this is definitely possible because I do ittrhe other way round to lock
down the administrator folder, so require authentication only on that sub
directory.
try using a virtual directory instead of a physical directory.


On Mon, Aug 13, 2012 at 5:25 PM, Carl Von Stetten
<vonner.li...@vonner.net>wrote:

>
> Dave,
>
> On my previous Win2K3 server, the only way I was able to get scheduled
> tasks to run properly was to allow anonymous access to the subfolder in
> the application which stored the scripts for scheduled tasks.  This
> worked fine for several years on the old server.
>
> I was trying to do the same thing on the new Win2K8R2 server (IIS 7.5).
> The application requires NTLM authentication, but I haven't been able to
> get the scheduled tasks to run.  Even when I hit the scheduled task
> pages directly in a browser (Firefox and Chrome), I am prompted to login
> with Active Directory credentials.  I also tried turning the subfolder
> in question into a virtual application in IIS 7.5 but that didn't seem
> to make any difference.
>
> Anyway, as you indicate, it appears that under IIS 7.5 you can't open a
> "security hole" (my quotes) by allowing anonymous access to a subfolder
> in a site requiring authentication.  So my workaround is to create a new
> site just for running scheduled tasks, and have that entire site allow
> anonymous authentication (thanks also to Russ who kinda suggested
> this).  I am now able to get these scheduled tasks to run properly.
>
> Thank you Dave and Russ for your suggestions!
> -Carl
>
> On 8/10/2012 4:19 PM, Dave Watts wrote:
> >> OK.  I created a local Windows user account named "SchedTasks".  I gave
> that account read permissions to the folder.  I set
> >> Anonymous Authentication to "Enabled" just for that folder, and set the
> credentials to use the SchedTasks account.  In the CF
> >> Scheduled Task, I specified SchedTask for the username, and filled in
> the correct password.  I still get the 401.2 error when
> >> running the scheduled task.
> > If you're creating a user account for CF to use, why would you enable
> > anonymous authentication? That's not going to help you any.
> >
> > First, I'd recommend that you don't even bother testing from CF yet.
> > Test from Firefox or some other non-IE HTTP client (wget, etc).
> >
> > Second, I don't think you can set anonymous authentication for a
> > folder, as such - it has to be a virtual server or a virtual
> > application. I could be wrong about that, though.
> >
> > Dave Watts, CTO, Fig Leaf Software
> > http://www.figleaf.com/
> > http://training.figleaf.com/
> >
> > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> > GSA Schedule, and provides the highest caliber vendor-authorized
> > instruction at our training centers, online, or onsite.
> >
> >
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352128
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to