Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/21/04
- Next message: Roger Abell: "Re: Problem to update ACL using ADsSecurity from VBScript"
- Previous message: Roger Abell: "Re: What do i need to change in this script to make it detect my DNS r"
- In reply to: Luis Garcia: "Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 21 Nov 2004 08:39:36 -0700
?? help you with what ?
First, do not use /D deny, instead, remove what should not
be allowed. The identities need Sync as they will want to
hook in order to be notified of changes.
-- Roger Abell Microsoft MVP (Windows Server System: Security) MCSE (W2k3,W2k,Nt4) MCDBA "Luis Garcia" <a@a.com> wrote in message news:e8k$%23$yyEHA.1564@TK2MSFTNGP09.phx.gbl... > Hi, > > I have IIS 6 installed and runnning. I try to denny write access to the user > IUSR_%COMPUTERNAME% in the root directory using the xcacls.vbs tool: > > cscript xcacls.vbs d:\inetpub\wwwroot /E /D IUSR_%COMPUTERNAME%:W > > The following rigths are dennied: > SYNCHRONIZE > FILE_WRITE_DATA > FILE_APPEND_DATA > FILE_WRITE_EA > FILE_WRITE_ATTRIBUTES > > Then IIS stop serving pages, it requires authentication. > > If I aplpy the same setting using the GUI, only the last four rights are > dennied, and the system works properly. > > Can anybody help me? > > Thanx > > >
- Next message: Roger Abell: "Re: Problem to update ACL using ADsSecurity from VBScript"
- Previous message: Roger Abell: "Re: What do i need to change in this script to make it detect my DNS r"
- In reply to: Luis Garcia: "Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
