Re: Default Web Configuration/Status

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Under "IP address" does it give you the ip address or '(All Unassigned)'?


"gbchriste" <gbchriste@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:633D175C-E1D8-4B8F-BC36-FA6BEF4BDA3F@xxxxxxxxxxxxxxxx
I'd already considered and checked this. Both Integrated Authentication and
Anonymous Access are enabled. In this configuration, Anonymous Access takes
precedence and Integrated is ignored. If I try to remove Anonymous, I am
prompted to reset access on several other SBS web facilities, like OWA,
ActiveSynch, Exchange, etc etc.

I'm hesitatnt to apply such a mass change without knowing the impact.

Any suggestions or observations from anyone who has run Default Web in
Integrated Authentication mode only?

"oneInTen" wrote:

Right click on the deault web site, select 'Properties' and then 'Directory
Security'. Click 'Edit' under 'Authentication and Access Control'.

Is 'Integrated Windows Authentication' checked? If no, check it

Costas


"gbchriste" <gbchriste@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E1B1A927-080E-403B-8E79-FE568D902051@xxxxxxxxxxxxxxxx
> The conventional wisdom is that SBS should not host the organization's
> public
> web site.
>
> In our case, www.mydomainname.org points to a publiclly hosted web site > at
> an external host. intranet.mydomainname.org points to my SBS host and > MX
> record.
>
> If so, what should the operational status and configuration of the > Default
> Web Site be? If I browse to the default web site via
> intranet.mydomainname.org from outside the LAN, I get the SBS Welcome
> screen
> with the links for My Company's Internal Web Site, Network > Configuration
> Wizard, Remote Web Workplace, and Information and Answers.
>
> Seems to me those are things I don't want the public to see. I don't > give
> the intranet.mydomainname.org URL out to anyone outside the > organization
> but
> someone could still find that server via IP address.
>
> But don't I have to have the Default Web up and operating for my
> organization users? The main item of interest is RWW. I can point > them
> to
> http://intranet.mydomainname.org/remote to get there but they are still
> coming in to the default web on port 80.
>
> Do I need to edit the default welcome page to remove all those links > and
> just put a message that directs people to www.mydomainname.org at our
> external web host? Any other suggestions for reducing or eliminating > this
> attack surface?
>
> Thanks,
>


.

Relevant Pages

  • Re: My boss....
    ... Click the Edit button under Authentication and access control, ... properties, Web site tab, Advanced button) ... Exchange virtual directory, clear the anonymous access box, clear Integrated ...
    (microsoft.public.windows.server.dns)
  • Anonymous Login for Web Visitors
    ... Extensions 2 setup and am having a difficult time with my public web site. ... "If you want to allow anonymous access, ... To enable anonymous access, you must first be sure that IIS is ... Under Administration, ...
    (microsoft.public.sharepoint.portalserver)
  • Bypass Login, Revisited
    ... Extensions 2 setup and am having a difficult time with my public web site. ... "If you want to allow anonymous access, ... To enable anonymous access, you must first be sure that IIS is ... Under Administration, ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: IIS 6 Authentication Suddenly Broken
    ... > I have a Windows 2003 domain controller running a test web site internally ... > started prompting users for user names and passwords for this test site, ... > anonymous access, but nothing I did there had any effect either. ...
    (microsoft.public.inetserver.iis)
  • Re: Password Protecting Directory IIS6
    ... configuration remotely, just disable the anonymous access, ... configure basic(+ ssl) or windows integrated authentication, ... > My old host allowed me to set this up using their control panel for the ...
    (microsoft.public.inetserver.iis.security)