Re: webfolders permissions and IIs

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 11/18/04 

Date: Thu, 18 Nov 2004 22:26:54 GMT

On Thu, 18 Nov 2004 11:29:14 -0800, "Tony" <tonyw@suse.stanford.edu>
wrote:

>well ok, the users log in to the domain and get mapped Q, R, S drives on a
>server. I have set share permissions on these so that users with the right
>access and "WRITE" to it and thats working fine.
>
>But I also have IIs running on that server and have web enabled all these
>drives. So I tried with one user that has no access to Q drive. The user go
>to network places, adds a network place as a webfolder, it prompts for
>authentication and the user logs in with domain\user, and boom, the user now
>has rights to the share and can write to it via web folder.
>
>does it make sense now?

Better. That's a Windows share/folder/file permission issue though,
not an IIS one. Your problem may be that you're assuming the user is
the user account accessing the share, when it may be the anonymous
user account that is actually accessing the file. Turn off anonymous
authentication and use only Windows Integrated to check this.

Jeff

>Thanks
>"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
>news:%23VBiyLazEHA.1264@TK2MSFTNGP12.phx.gbl...
>> "Tony" <tonyw@suse.stanford.edu> wrote in message
>> news:ec8VXaZzEHA.3392@TK2MSFTNGP10.phx.gbl...
>>> This user I have cannot access the share through mapped drives. This is
>> fine
>>> because I have set the share permissions so that the user does not belong
>> to
>>> any groups that have access to the share. But, when the user go to
>>> network
>>> places and try to add the folder or share as a webfolder, the user can
>>> authenticate to it. get in and write to the share. Why is that?
>>>
>>> IIs permissions on the webfolder only allows ALL write access or denies
>>> everyone write access?
>>>
>>> I need to web enable these mapped drives and shares so IIS is a must.
>>>
>>> I am confused
>>
>> I'm confused. Are you talking about Mapped drives, UNC shares, or
>> webfolders?
>>
>>
>

Relevant Pages

  • Re: prevent users from accessing c drive
    ... See my other post about your NTFS permissions, ... For remote users who run a limited amount of applications, ... MCSE, CCEA, Microsoft MVP - Terminal Server ... There is a GPO setting to *hide* drives on the server, ...
    (microsoft.public.windows.terminal_services)
  • Re: The specified network name is nolonger available
    ... My server is named FS1. ... > ping \\fs1 and I will get a successful return. ... I still can access the drives marked ... What is the point in these permissions as they can be bypassed by mapping ...
    (microsoft.public.win2000.networking)
  • Re: Read only file permissions
    ... I have what appears to be an identical problem on a 2003 server. ... I tried removing the folder read only using ATTRIB as per Article ID: ... I set this server up and other shares on it both as home drives and mapped ... Click on the folder and change permissions on ...
    (microsoft.public.windows.server.general)
  • Re: webfolders permissions and IIs
    ... I have set share permissions on these so that users with the right ... >But I also have IIs running on that server and have web enabled all these ... Are you talking about Mapped drives, UNC shares, or ...
    (microsoft.public.win2000.general)
  • Re: webfolders permissions and IIs
    ... I have set share permissions on these so that users with the right ... >But I also have IIs running on that server and have web enabled all these ... Are you talking about Mapped drives, UNC shares, or ...
    (microsoft.public.inetserver.iis)