IIS 5 Security ? - Only users that members of "Administrators" work!

[TJRTech]

Only users that are members of the Administrators group can log on to my website.

I have changed NTFS perms, etc until blue in the face.

My website has basic authentication. The web server is on the domain server. It's a W2K box. When browsing to the site I get the grey logon panel, and enter the userid and password.

I can access the site fine if trying a userid that has Administrator membership, else I get an auth failure.

Please help.

Tom

 

[Jackcipk]

Can you explain what you want (want only adm group to logon, or everyone), and what the problems are ? It's not about whether you can do it or not, it's about HOW
OK, Let's Do It !!!
jliu@Cipk.com

 

[TJRTech]

I was stating that only admins can log on. That is NOT the desired circumstance. I want any person with a valid domain account to logon.

I found my problem.

First issue, which was easy to resolve, was to add Domain Users group that that which could "Logon Locally" to the Win2K IIS Server (also it's own domain). This was done through Active Directory Domain Policy management.

The 2nd issue was a little more interesting. My website was set up with a default.asp. However, default.asp was not listed first in the hiearchy of documents. When I made it first, then everything worked fine. It seems that it worked okay for admins, as I guess they could "list" the files and wind their way down the hiearchy. Normal users didn't have list rights on the site, so I assume that is why it was failing.

So...moral: If using Basic Authentication make sure Domain Users have right to logon locally AND that you have the appropriate document settings for the implementation of your site.

Tom Rogers
TJRTech.