Help! I've screwed up my permissions

[HowardMarks]

Hi everyone

I've done something stupid and screwed up some permissions in IIS. I had received several hack attacks on the server and decided to run the 'lock down' iis tool from microsoft.

Now when i go to my website

http://www.artswales.org

i get requested for a username ( i think when it tries to load the picture on the left hand side). The rest of the page loads correctly.

I have tried giving permissions to the ISUR_SERVER accounts, and indeed Everybody, on all of the folders of the website, and the virtual folders in IIS.

Nothing i do seems to change this, including, strangely enough, restoring the IIS settings to before I used the lockdown tool. (Does this mean its a real folder thing and not a virtual folder thing)

Please help! Any advice would be greatly appreciated. I have a limited knowledge of IIS

Nick (Webmaster)

http://www.npfx.com

http://www.artswales.org

 

[HowardMarks]

I have now managed to resolve the problem.

For some reason, the owners of the individual images had been changed to the IUSR_GUEST account. However the permissions on those images did not the ISUR_GUEST account! Therefore the user could not view the files but only they had rights to grant permissions to themselves! I reset the owner of the files to Administrator and was able to add the permissions.



Nick (Webmaster)

http://www.npfx.com

http://www.artswales.org