Re: Experiencing Sporadic HTTP Error 401.1 - Unauthorized errors on IIS

From: PhCrypto (PhCrypto_at_nospam.nospam)
Date: 05/11/04 

Date: Tue, 11 May 2004 09:56:32 -0400

I created a user identical to IUSR and set this user as the anonymous user
account in IIS Web Sites.
All web sites and web pages now return 401.1. Access to all IIS resources
are denied with 401.1. I created several users, each with more and more
powerful privileges and all of them render the same result 401.1.
 I even went as far as to create a user who is part of the Administrator
account.
Still the same result.
I stop and start iisadmin and w3svc each time.
I even went as far as rebooting each time.
I can't believe that a user that has Administrator privileges on the
computer can ever receive a 401.1.
Can you explain how this can be ?
PhCrypto

""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
news:f7WNX5jNEHA.304@cpmsftngxa10.phx.gbl...
> Hi PhCrypto,
>
> The timestamp is proper. IIS log uses GMT instead of local time zone.
> I did see the 401.1 error with anonymous logon. However, the 680
> events in security log didn't make much sense, it means IIS attemped
> to logon IUSR for anonymous access. Had you seen any failed events
> like 533 after the 680?
>
> I'm not sure if WinHTTP Web Proxy service can be the cause of this
> problem. IUSR account's password is randomly generated and stored in
> System SAM and IIS metabase. Reset it in all these places is a little
> inconvenient. I suggest you perform a test: create a new local
> account with proper permission(group policy and NTFS, clone IUSR) and
> change the problem site to use that account for anonymous access. See
> if the problem will still remain or it's only odd on IUSR. Also,
> using localhost/127.0.0.1 instead of 192.168.10.62 to test.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
>

Relevant Pages

  • Re: Anonymous Account not working
    ... the Iusr_ you are using may have been defined before the final ... IIS install on that box. ... I think the problem may be with the local account. ... built the server there was another server that was named WEB02, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IWAM out of sync (DCOM error) 10004
    ... password that is cached in the IIS Metabase for the IWAM and IUSR accounts. ... This should show you whether the password is being changed in the metabase. ... If you reset the password on the domain account, ... and IIS is set to control the IUSR password? ...
    (microsoft.public.inetserver.iis.security)
  • Re: authentication and impersonation question
    ... when asp.net impersonation is not set, authentication by IIS ... process account (the IIS application pool process account for IIS 6, ... In addition the FileAuthorizationModule checks if read access is allowed on the requested resource for the client (either the auth client or IUSR). ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: IIS 6.0 Security, Internet Guest Account
    ... What you need to do is to give the right password to the IUSR account (which ... IIS attempts to use another ... >> changed the Windows user account for anonymouse access ...
    (microsoft.public.inetserver.iis.security)
  • RE: RWW Issue
    ... Please backup your IIS settings first. ... Web Sites and Default Web Sites. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
Loading