iusr permissions inhertited from where in IIS6?

Hi

Win2k3 Server Std with sp1\IIS6.

We have just done an IIS install and are getting 401.3 Unauthorized
errors on the default website. On inspection the iusr account has no
effective permissions on the wwwroot folder. Looking at other IIS
installations that work ok iusr has:

Traverse Folder\Execute File
List Folder\Read Data
Read Attributes
Read Extended Attributes
Read Permissions

on wwwroot. The problem is that I cannot see where it gets these
permissions from. I have looked up through inetpub to c:\ and the only
explicit assignment I can see for iusr is deny write on wwwroot. The
other explicit assignments appear to be the same between the working
and non-working systems. Additionally iusr is only a memeber of
'Guests' which has no explicit assignments.

I can see a 'read and execute' assignment for Everyone to c:\ but
this is set to 'This folder only'.

Can anyone shed any llight on this...where does iusr inherit its
permissions from? Also why might this installation have failed in this
way. The install was done using a domain account that is a member of
the local admins group.

Thanks for you help

Mike

Re: iusr permissions inhertited from where in IIS6?

Hi,

You can look in iis6 setup log to see if there are any indications of
failures to set ACLs properly.

In terms of default permissions both the IIS_WPG group, and the
IUSR_ account should have Read/Execute permissions specified at
the c:\inetpub\wwwroot level

Cheers
Ken

wrote in message
news:1173957457.279274.27100@y66g2000hsf.googlegroups.com...
> Hi
>
> Win2k3 Server Std with sp1\IIS6.
>
> We have just done an IIS install and are getting 401.3 Unauthorized
> errors on the default website. On inspection the iusr account has no
> effective permissions on the wwwroot folder. Looking at other IIS
> installations that work ok iusr has:
>
> Traverse Folder\Execute File
> List Folder\Read Data
> Read Attributes
> Read Extended Attributes
> Read Permissions
>
> on wwwroot. The problem is that I cannot see where it gets these
> permissions from. I have looked up through inetpub to c:\ and the only
> explicit assignment I can see for iusr is deny write on wwwroot. The
> other explicit assignments appear to be the same between the working
> and non-working systems. Additionally iusr is only a memeber of
> 'Guests' which has no explicit assignments.
>
> I can see a 'read and execute' assignment for Everyone to c:\ but
> this is set to 'This folder only'.
>
> Can anyone shed any llight on this...where does iusr inherit its
> permissions from? Also why might this installation have failed in this
> way. The install was done using a domain account that is a member of
> the local admins group.
>
> Thanks for you help
>
> Mike
>