Microsoft IIS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
User Name:
Password:
Remember me
Go Back   ASP Free ForumsSystem AdministrationMicrosoft IIS

Closed Thread
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread ASP Free Forums Sponsor:
  #1  
Old January 12th, 2006, 09:00 PM
kila kila is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 90 kila User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 h 33 m 59 sec
Reputation Power: 6
IUSR Account Lost Permissions, Site Unreachable

I run IIS6 with Plesk 7.5. I was noodling around in Plesk, I believe in the 'Setup' for one of the sites turning on Custom Errors.. and then experience this problem all of a sudden:

The one site (out of 50 on the box) I was dealing with has apparently lost its IUSR password synch: if you try and access the site now, you are given a user name and password NTFS prompt.

Now.. i have done my reading on this today, and nearly six hours of sweating and cursing (its a busy ecommerce site), still NOTHING.

I realize the IUSR password is stored in the IIS Metabase, in the IIS Properties, and one other place. I tried every possible solution i could find on the subject, from copying the password out of the metabase and pasting it into the IUSR_<username> in the IIS Properties, deleting and recreating the IUSR account, and NOTHING.

Looking at all the permissions, everything is exactly as it should be. It is driving me nuts, and soon will be making me poor.. please someone give me the lightening bolt of wisdom.

This happened once before on a smaller site, and i just deleted the site in Plesk, then in IIS, and remade it and no more problems. This WILL NOT happen this time as the currently affected site is huge, and would take days to rebuild the structure, permissions, databases, etc.

I would really like to uninstall Plesk, but it has great features like when you press 'STOP' on the tray icon for it, it causes the whole server to be inaccessible thus spawning a 9pm service call to my datacenter to go physically reboot (as has occured tonight, as the final insult in a long day of terror). PLESK IS EVIL SOMEONE HELP !

Reply With Quote
  #2  
Old January 13th, 2006, 05:30 AM
elijathegold's Avatar
elijathegold elijathegold is offline
Senior Fire Wizard
ASP Free God 1st Plane (5500 - 5999 posts)
 
Join Date: Feb 2005
Location: Ashford, Kent. England
Posts: 5,651 elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)  Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 2 Months 2 Weeks 2 Days 4 h 30 m 19 sec
Reputation Power: 302
In IIS you check the option to allow windows to manage
the password. This means that you don't need to enter a
password at all.

I don't know if Plesk has the same option.

Also, have you turned off anonymous access. Again a simple
tick box in IIS
__________________
And he picked it all up... in his pick-up.





Friends of Shemzilla

Reply With Quote
  #3  
Old January 13th, 2006, 06:19 AM
kila kila is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 90 kila User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 h 33 m 59 sec
Reputation Power: 6
Hi,

No I cannot see anything in Plesk regarding anon user access.

In IIS Manager under the particular site properties, anonymous user access is most definitely on.

I tried creating a new IUSR account, assigning it to the appropriate groups, and still get the password prompt. I even tried assigning 'Everyone' and giving Full Control on everything at WWWRoot and below. just for a moment to see what would happen: nothing, still a password prompt.

Quote:
Originally Posted by elijathegold
In IIS you check the option to allow windows to manage
the password. This means that you don't need to enter a
password at all.

I don't know if Plesk has the same option.

Also, have you turned off anonymous access. Again a simple
tick box in IIS

Reply With Quote
  #4  
Old January 13th, 2006, 06:23 AM
elijathegold's Avatar
elijathegold elijathegold is offline
Senior Fire Wizard
ASP Free God 1st Plane (5500 - 5999 posts)
 
Join Date: Feb 2005
Location: Ashford, Kent. England
Posts: 5,651 elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)elijathegold User rank is Captain (20000 - 30000 Reputation Level)  Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1980013 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 2 Months 2 Weeks 2 Days 4 h 30 m 19 sec
Reputation Power: 302
If it is a windows 2003 server, make sure that IWAM_machine has
the same permissions as IUSR.

It seems to need them

Reply With Quote
  #5  
Old January 13th, 2006, 09:09 AM
kila kila is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 90 kila User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 h 33 m 59 sec
Reputation Power: 6
The IWAM account is present on the whole site, and has Read permissions.

I believe the solution should be to locate this IUSR_Name in the Metabase, and then copy the password from there into the IIS Directory Security setting for the affected site..

I cannot figure out where to find the user account in metabase explorer though, any idea?

##EDIT. I found the Anonymous User Password for the site and copied it into the IIS Directory Security panel. This seems to have stopped the NTFS prompt, however i am getting a 'Directory Listing Denied
This Virtual Directory does not allow contents to be listed.' message now.. all permissions should be correct on the virtual dirs in question..

Quote:
Originally Posted by elijathegold
If it is a windows 2003 server, make sure that IWAM_machine has
the same permissions as IUSR.

It seems to need them

Reply With Quote
  #6  
Old July 30th, 2009, 03:51 PM
brccabral brccabral is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Jul 2009
Posts: 2 brccabral User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 7 m 30 sec
Reputation Power: 0
try this

works for IIS 7.0, Windows Vista
put the account
"NT AUTHORITY\Authenticated Users"
under administrators group and you are free to write/read/execute !!


Quote:
Originally Posted by kila
I run IIS6 with Plesk 7.5. I was noodling around in Plesk, I believe in the 'Setup' for one of the sites turning on Custom Errors.. and then experience this problem all of a sudden:

The one site (out of 50 on the box) I was dealing with has apparently lost its IUSR password synch: if you try and access the site now, you are given a user name and password NTFS prompt.

Now.. i have done my reading on this today, and nearly six hours of sweating and cursing (its a busy ecommerce site), still NOTHING.

I realize the IUSR password is stored in the IIS Metabase, in the IIS Properties, and one other place. I tried every possible solution i could find on the subject, from copying the password out of the metabase and pasting it into the IUSR_<username> in the IIS Properties, deleting and recreating the IUSR account, and NOTHING.

Looking at all the permissions, everything is exactly as it should be. It is driving me nuts, and soon will be making me poor.. please someone give me the lightening bolt of wisdom.

This happened once before on a smaller site, and i just deleted the site in Plesk, then in IIS, and remade it and no more problems. This WILL NOT happen this time as the currently affected site is huge, and would take days to rebuild the structure, permissions, databases, etc.

I would really like to uninstall Plesk, but it has great features like when you press 'STOP' on the tray icon for it, it causes the whole server to be inaccessible thus spawning a 9pm service call to my datacenter to go physically reboot (as has occured tonight, as the final insult in a long day of terror). PLESK IS EVIL SOMEONE HELP !

Reply With Quote
  #7  
Old August 2nd, 2009, 03:24 AM
Shadow Wizard's Avatar
Shadow Wizard Shadow Wizard is offline
Moderator From Beyond
ASP Free God 48th Plane (28500 - 28999 posts)
 
Join Date: Sep 2004
Location: Israel
Posts: 28,838 Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)Shadow Wizard User rank is General 21st Grade (Above 100000 Reputation Level)  Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2Folding Points: 549372 Folding Title: Super Ultimate Folder - Level 2
Time spent in forums: 3 Months 2 Weeks 1 Day 14 h 30 m 10 sec
Reputation Power: 2389
Quote:
Originally Posted by brccabral
works for IIS 7.0, Windows Vista
put the account
"NT AUTHORITY\Authenticated Users"
under administrators group and you are free to write/read/execute !!
for the record, this is VERY risky, as everyone in the network will
gain full control of the server and usually you won't want such thing.

closing this old thread, feel free to create new thread to discuss those
things or post new information.

Reply With Quote
Closed Thread

Viewing: ASP Free ForumsSystem AdministrationMicrosoft IIS > IUSR Account Lost Permissions, Site Unreachabl


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump





 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 1 Hosted by Hostway
For more Enterprise Application Development news, visit eWeek