OT: Anonymous access failure in IIS NT4
I have a really screwed up problem. For some reason anyonymous access to all the sites on one of our servers has stopped and cannot be viewed on the net. Everything looks fine in IIS. If i switch anonymous access to an administrator account everything all the websites can be viewed, however FTP access for all users is still not working. Im running IIS 4 with service pack 6. Anyone experience a problem like this before? Emmet ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: Anonymous access failure in IIS NT4
Take a look at your directory permissions. Make sure the 'Everyone' group has read permissions. jon - Original Message - From: "Emmet McGovern" [EMAIL PROTECTED] To: "CF-Talk" [EMAIL PROTECTED] Sent: Friday, December 22, 2000 11:37 AM Subject: OT: Anonymous access failure in IIS NT4 I have a really screwed up problem. For some reason anyonymous access to all the sites on one of our servers has stopped and cannot be viewed on the net. Everything looks fine in IIS. If i switch anonymous access to an administrator account everything all the websites can be viewed, however FTP access for all users is still not working. Im running IIS 4 with service pack 6. Anyone experience a problem like this before? Emmet ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Anonymous access failure in IIS NT4
Take a look at your directory permissions. Make sure the 'Everyone' group has read permissions. Instead of this, make sure that the IIS anonymous user has read permissions, or the "Authenticated Users" group. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Anonymous access failure in IIS NT4
have you resynced the anonymous password with the IUSR_MACHINE account via the MMC? chris olive, cio cresco technologies [EMAIL PROTECTED] http://www.crescotech.com -Original Message- From: Emmet McGovern [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 11:37 AM To: CF-Talk Subject: OT: Anonymous access failure in IIS NT4 I have a really screwed up problem. For some reason anyonymous access to all the sites on one of our servers has stopped and cannot be viewed on the net. Everything looks fine in IIS. If i switch anonymous access to an administrator account everything all the websites can be viewed, however FTP access for all users is still not working. Im running IIS 4 with service pack 6. Anyone experience a problem like this before? Emmet ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Anonymous access failure in IIS NT4
All permissions are set correctly. I still have the same problem though. Microsofts knowledge base isnt much use either. This is threatening to kill my weekend at this point :( Emmet -Original Message- From: Benjamin S. Rogers [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 12:13 PM To: CF-Talk Subject: RE: Anonymous access failure in IIS NT4 If you are running Web sites in their own memory space, then the IWAM account for the machine (either in the domain SAM if your Web server is a domain control or on the local machine's SAM otherwise) needs read access to the Web site directories. If the Web sites are running in shared memory space, then the IUSR account needs read access. You may want to make sure that the SYSTEM account (or whatever account you run ColdFusion under) has at least read to the directories if these are ColdFusion sites. Judging by your description of the problem, however, this is probably not the problem. The only other accounts that should have permissions to files in the Web site directories are, of course, the administrative account, and those users who need special permissions for FTP, password protected web sites, etc. Do not give the Guest account or the Everyone group access. Benjamin S. Rogers Web Developer, c4.net voice: (508) 240-0051 fax: (508) 240-0057 -Original Message- From: Emmet McGovern [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 11:37 AM To: CF-Talk Subject: OT: Anonymous access failure in IIS NT4 I have a really screwed up problem. For some reason anyonymous access to all the sites on one of our servers has stopped and cannot be viewed on the net. Everything looks fine in IIS. If i switch anonymous access to an administrator account everything all the websites can be viewed, however FTP access for all users is still not working. Im running IIS 4 with service pack 6. Anyone experience a problem like this before? Emmet ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Anonymous access failure in IIS NT4
All permissions are set correctly. I still have the same problem though. Microsofts knowledge base isnt much use either. This is threatening to kill my weekend at this point :( My guess is that, despite what you think, all permissions aren't set correctly. There are a couple of things you might try. 1. Can you reach HTML pages via the anonymous user, but not CF pages? If so, the problem is that you need to allow RX rights for the anonymous user to the C:\CFUSION\BIN\ISCF.DLL file, which is what IIS uses to pass requests to CF. This is a common problem. 2. Can you log onto the console as the anonymous user, and browse the filesystem and read the affected files? If not, that may be a problem. 3. Does the anonymous user have "log on locally" rights? If I recall correctly, that's required in addition to simply allowing network logons for that user. You'll need to go into User Manager and look at user rights under the Policies menu. 4. If none of those guesses are correct, you might try using a nifty little utility, NT File Monitor. It's freeware, and will let you see some of the file access permissions issues in real time: http://www.sysinternals.com/ Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Anonymous access failure in IIS NT4
Heh, it would seem that permissions are not set correctly as you are able to connect to the Web site using an account with administrator permissions. Perhaps you meant to say that the permissions were set as per the recommendations you've received so far? If that is the case, then you may want to double check what account IIS is in fact using. Are you running Web sites in their own memory space or not? Are these ColdFusion sites, HTML, etc.? Do your security logs tell you anything? Any additionally information would be helpful. Benjamin S. Rogers Web Developer, c4.net voice: (508) 240-0051 fax: (508) 240-0057 -Original Message- From: Emmet McGovern [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 12:50 PM To: CF-Talk Subject: RE: Anonymous access failure in IIS NT4 All permissions are set correctly. I still have the same problem though. Microsofts knowledge base isnt much use either. This is threatening to kill my weekend at this point :( Emmet -Original Message- From: Benjamin S. Rogers [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 12:13 PM To: CF-Talk Subject: RE: Anonymous access failure in IIS NT4 If you are running Web sites in their own memory space, then the IWAM account for the machine (either in the domain SAM if your Web server is a domain control or on the local machine's SAM otherwise) needs read access to the Web site directories. If the Web sites are running in shared memory space, then the IUSR account needs read access. You may want to make sure that the SYSTEM account (or whatever account you run ColdFusion under) has at least read to the directories if these are ColdFusion sites. Judging by your description of the problem, however, this is probably not the problem. The only other accounts that should have permissions to files in the Web site directories are, of course, the administrative account, and those users who need special permissions for FTP, password protected web sites, etc. Do not give the Guest account or the Everyone group access. Benjamin S. Rogers Web Developer, c4.net voice: (508) 240-0051 fax: (508) 240-0057 -Original Message- From: Emmet McGovern [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 11:37 AM To: CF-Talk Subject: OT: Anonymous access failure in IIS NT4 I have a really screwed up problem. For some reason anyonymous access to all the sites on one of our servers has stopped and cannot be viewed on the net. Everything looks fine in IIS. If i switch anonymous access to an administrator account everything all the websites can be viewed, however FTP access for all users is still not working. Im running IIS 4 with service pack 6. Anyone experience a problem like this before? Emmet ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
