RE: IIS + win2k3 DC

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

anonymous_at_discussions.microsoft.com
Date: 05/07/04


Date: Thu, 6 May 2004 23:31:23 -0700

Thanks for the help.
Sadly I can't follow the steps you descibed because
windows does not recognize the network service as an
object that can be added.
I made the following screenshot:
http://home.wanadoo.nl/olivier.vanderkruijf/pics/netserv.jp
g
More help would be gratly appreciated.

GRTZ

>-----Original Message-----
>Hello,
>You are right- because this is a DC, the Network service
account will not
>be a member of the IIS_WPG group for security reasons.
Here is what you
>want to do:
>1. Click "Start", click "Windows Explorer", double-
click "My Computer",
>double-click the system drive (this is typically drive
C), and then
>double-click "WINDOWS" or "WINNT".
>2. Double-click "Help", double-click "iisHelp", right-
click "common", and
>then click "Sharing and Security".
>3. Click "Security", click "Add", type "Network Service"
(without the
>quotation marks), and then click "OK".
>4. With "Network Service" selected, click to select the
following check
>boxes, and then click "OK":
> - "Read and Execute"
> - "List Folder Contents"
> - "Read"
>5. Repeat steps 1-4 for the <systemroot>\system32
\inetsrv\ASP Compiled
>Templates folder and <systemroot>\IIS Temporary
Compressed Files folder.
>except give the account Full Permissions instead of just
Read, Read &
>Execute and List Folder contents.
>
>Hope this helps!!!
>
>Thanks,
>Yogita Manghnani
>Microsoft Developer Support
>Internet Information Server
>
>**********************************************************
***********
>>>Please do not send email directly to this alias. This
is an online
>account name for newsgroup participation only.<<
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>You assume all risk for your use.
>
>© 2003 Microsoft Corporation. All rights reserved.
>**********************************************************
***********
>
>.
>



Relevant Pages

  • Re: DefaultAppPool
    ... account will not be a member of the IIS_WPG group for security reasons. ... Give the Network service account explicit permissions to the folders ... Microsoft Developer Support ... Internet Information Server ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 6 Problem
    ... In most cases with IIS on a DC, you will need to give the Network service ... account explicit permissions on the folders mentioned in Q332097. ... Microsoft Developer Support ...
    (microsoft.public.inetserver.iis)
  • Re: kerberos SQL service accounts
    ... However, network service and local service have very similar sets of permissions, so they should represent a fairly equal trade in terms of using a low privileged service account. ... When you install SQL Server and specify a domain account for the mssqlserver service, are you saying setup doesn't configure the spn's? ... The reason for this is that when SQL is installed and configured to be run under either Network Service or System, the installer will actually add the appropriate Kerb SPNs to the domain computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Why must credentials be explictly given when user is already l
    ... NETWORK SERVICE is a built-in account introduced as of WinXP that it used to ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... AD, authentication is not required by default, so if you accidentally ...
    (microsoft.public.dotnet.security)
  • Re: system.diagnostic.process Error Output
    ... Network Service is the default> account that is used and it is not an Administrator level account by default> and probably doesn't have permission to access the file. ... > "Paul Bergson" wrote in message ... This is even if I use the account impersonation. ...
    (microsoft.public.dotnet.framework.aspnet)