RE: logon failure to a remote share with a virtual directory

From: rfontaine (rfontaine_at_discussions.microsoft.com)
Date: 09/30/04

  • Next message: ad: "Re: Can zip it before download?" 
    Date: Thu, 30 Sep 2004 13:49:03 -0700

    I finally understand the problem when I read the description of the Logon
    function in a sdk. In order for an application to use a credential of an
    another user to acces a remote share that application need to create the
    token locally first and then used it to acces the network resource. So the
    user need Logon Locally right not on the computer hosting the ressource but
    on the computer where the application run.

    Thanks Mark

    "rfontaine" wrote:

    > I have a virtual directory on IIS 5.0 to a remote share on a Windows 2003
    > file server. The "connect as" is a domain user account. The share as read
    > permission for everyone and the NTFS permission is set so the user as access
    > to the directory. I get the stop sign with the status "logon failure: the
    > user has not been granted the request type logon"
    >
    > The local policies on the file server for allow access from the network
    > contains the everyone group and the same policies on the domain is not set.
    >
    > I can't find what security setting I need to set for that user. Can you help.
    >
    > Note: When I put the user in the domain Admins group the virtual directory
    > work. But I know it is against good security practice.
    >
    > Thanks

  • Next message: ad: "Re: Can zip it before download?"

    Relevant Pages

    • Re: Forced user logoff via group policy
      ... This security setting determines whether to disconnect users who are ... to be forcibly disconnected when the client's logon hours expire. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Unable to view list of available newsgroups
      ... I've already contacted breath and they say no logon etc should be required. ... I'm wondering if its some kind of security setting in OE or even WinXP since ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Turn Off User Logging (Event Log)
      ... only do "Failure" since hopefully most will successfully logon... ... I believe Domain policies will override the local policies though... ... My issue though is that I would like to turn off the event logging ...
      (microsoft.public.win2000.security)
    • Logon Interactively Error
      ... check page 21, the second post down. ... local policies, user rights, ALLOW LOGON THROUGH TERMINAL ... >I have read the posts about the interactive login text ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: Logon Locally No Longer Appears in Logon Choices on Domain Controller VIA Remote Desktop
      ... We are using Domain accounts to access the servers locally and the Domain Admins group is a member of the local admins on the DC's. ... When a server is promoted to a DC the logon locally option is removed from the logon dropdown. ... Logon="Default domain selection" ...
      (microsoft.public.windows.server.general)