w2k3, IIS 6.0, virtual website and prompting for authentication

Hello,

I'm installing Trend Micro's OfficeScan console on a windows 2003 server
with IIS 6.0. the IUSR_servername account is being used on a virtual website.
When I try to access the website it prompts me for authentication for the
domain. How can I set this up, so no authentication will be prompted? I've
tried using the domain admin account inplace of the IUSR_servername account
and I can connect without being prompted. I don't want to use this high of an
authority account. I've tried to make a domain account that is part of the
domain users and domain guests...but then I'm prompted again for
authentication. Idealy, I would like to user the local IUSR_servername account

what are the steps that I need to do to configure it properly?

--
Donna S.

Re: w2k3, IIS 6.0, virtual website and prompting for authentication

IIS needs to use a user account to access files on the file system. When
anonymous access is enabled, IIS will try to access the files using the
configured anonymous account (by default IUSR_Machinename).

But if the anonymous account does not have the necessary rights to access
the file, IIS will need another user account. If you have enabled
"Integrated authentication" or "basic authentication", you will be
prompted to log on. If no other authentication method is enabled, besides
anonymous access, you will immediately see a "deny" status code.

In your case, the problem seems to be that the IUSR_Machinename user
account does not have the necessary rights to access the files. I say this
because you say it works if you change IUSR_Machinename to a domain admin
account, which probably have more rights.

So change back to using the IUSR_MachineName account, and then start
looking in the log file to identify the file(s) that this account does not
have sufficient access to.

--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


Donna S. wrote:

>Hello,
>
>I'm installing Trend Micro's OfficeScan console on a windows 2003 server
>with IIS 6.0. the IUSR_servername account is being used on a virtual
>website.
>When I try to access the website it prompts me for authentication for the
>domain. How can I set this up, so no authentication will be prompted? I've
>tried using the domain admin account inplace of the IUSR_servername account
>and I can connect without being prompted. I don't want to use this high of
>an
>authority account. I've tried to make a domain account that is part of the
>domain users and domain guests...but then I'm prompted again for
>authentication. Idealy, I would like to user the local IUSR_servername
>account
>
>what are the steps that I need to do to configure it properly?

Re: w2k3, IIS 6.0, virtual website and prompting for authenticatio

that's were I'm stuck....the log files are confusing me. So I have given all
access to the IUSR_servername account for the officescan folder and then let
the children inherit the NTFS permissions.

I'm allowing execution and scripting on my virtual website. the application
pool is set to local system

I'm using SSL port 443 for communication... the certificate is not
certified...but it wasn't before in IIS 5.0. I've screwed up somewhere and
now need to uninstall Trendmicro...because now I just don't have enough
permissions to display anything...let alone get prompted to see the
authentication field.

I read somewhere about IIS 6.0 won't allow exe or cgi files execute...maybe
that's my issue? Once I get to the main page....it shows this path
officescan/console/cgi/cgiChkMasterPwd.exe which is the main page.

Help!

#Date: 2007-07-31 22:26:44
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2007-07-31 22:26:44 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 3 5
2007-07-31 22:32:59 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 3 5
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2007-07-31 22:41:50
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2007-07-31 22:41:50 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 1 0
2007-07-31 22:42:59 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 1 0
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2007-07-31 22:48:09
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2007-07-31 22:48:09 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 1 0
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2007-07-31 22:49:35
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET /officescan/Default.htm - 443 -
172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/cgi/cgiChkMasterPwd.exe - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/trend-style.css - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/localization.js - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/acType.js - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/os-logo.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/os-logoCs.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/ofsn6.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/os-logoCm.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/ofsn6Cs.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET /officescan/console/html/top.css
- 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/ofsn6Cm.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/content.css - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/os-logosm.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/trendmicro.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/px.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/top-topback.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/bannerbk.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/os-logo.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
/officescan/console/html/images/ofsn6.gif - 443 - 172.20.70.24
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
#Software: Microsoft Internet Information Services 6.0
--
Donna S.


"Kristofer Gafvert" wrote:

> IIS needs to use a user account to access files on the file system. When
> anonymous access is enabled, IIS will try to access the files using the
> configured anonymous account (by default IUSR_Machinename).
>
> But if the anonymous account does not have the necessary rights to access
> the file, IIS will need another user account. If you have enabled
> "Integrated authentication" or "basic authentication", you will be
> prompted to log on. If no other authentication method is enabled, besides
> anonymous access, you will immediately see a "deny" status code.
>
> In your case, the problem seems to be that the IUSR_Machinename user
> account does not have the necessary rights to access the files. I say this
> because you say it works if you change IUSR_Machinename to a domain admin
> account, which probably have more rights.
>
> So change back to using the IUSR_MachineName account, and then start
> looking in the log file to identify the file(s) that this account does not
> have sufficient access to.
>
> --
> Regards,
> Kristofer Gafvert
> http://www.gafvert.info/iis/ - IIS Related Info
>
>
> Donna S. wrote:
>
> >Hello,
> >
> >I'm installing Trend Micro's OfficeScan console on a windows 2003 server
> >with IIS 6.0. the IUSR_servername account is being used on a virtual
> >website.
> >When I try to access the website it prompts me for authentication for the
> >domain. How can I set this up, so no authentication will be prompted? I've
> >tried using the domain admin account inplace of the IUSR_servername account
> >and I can connect without being prompted. I don't want to use this high of
> >an
> >authority account. I've tried to make a domain account that is part of the
> >domain users and domain guests...but then I'm prompted again for
> >authentication. Idealy, I would like to user the local IUSR_servername
> >account
> >
> >what are the steps that I need to do to configure it properly?
>

Re: w2k3, IIS 6.0, virtual website and prompting for authenticatio

Well I found out the answer...

From User rights on the local box
Find

Deny Access to this computer from the Network
Remove the Anonymous Account and the Guest account.

I tried to access the website...and all was fixed.
--
Donna S.


"Donna S." wrote:

> that's were I'm stuck....the log files are confusing me. So I have given all
> access to the IUSR_servername account for the officescan folder and then let
> the children inherit the NTFS permissions.
>
> I'm allowing execution and scripting on my virtual website. the application
> pool is set to local system
>
> I'm using SSL port 443 for communication... the certificate is not
> certified...but it wasn't before in IIS 5.0. I've screwed up somewhere and
> now need to uninstall Trendmicro...because now I just don't have enough
> permissions to display anything...let alone get prompted to see the
> authentication field.
>
> I read somewhere about IIS 6.0 won't allow exe or cgi files execute...maybe
> that's my issue? Once I get to the main page....it shows this path
> officescan/console/cgi/cgiChkMasterPwd.exe which is the main page.
>
> Help!
>
> #Date: 2007-07-31 22:26:44
> #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2007-07-31 22:26:44 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
> 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 3 5
> 2007-07-31 22:32:59 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
> 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 3 5
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2007-07-31 22:41:50
> #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2007-07-31 22:41:50 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
> 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 1 0
> 2007-07-31 22:42:59 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
> 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 1 0
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2007-07-31 22:48:09
> #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2007-07-31 22:48:09 W3SVC3 172.20.70.24 GET /officescan/ - 443 -
> 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 401 1 0
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2007-07-31 22:49:35
> #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET /officescan/Default.htm - 443 -
> 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/cgi/cgiChkMasterPwd.exe - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/trend-style.css - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/localization.js - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/acType.js - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/os-logo.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/os-logoCs.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/ofsn6.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/os-logoCm.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/ofsn6Cs.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET /officescan/console/html/top.css
> - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/ofsn6Cm.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/content.css - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/os-logosm.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/trendmicro.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/px.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/top-topback.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/bannerbk.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/os-logo.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> 2007-07-31 22:49:35 W3SVC3 172.20.70.24 GET
> /officescan/console/html/images/ofsn6.gif - 443 - 172.20.70.24
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET +CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
> #Software: Microsoft Internet Information Services 6.0
> --
> Donna S.
>
>
> "Kristofer Gafvert" wrote:
>
> > IIS needs to use a user account to access files on the file system. When
> > anonymous access is enabled, IIS will try to access the files using the
> > configured anonymous account (by default IUSR_Machinename).
> >
> > But if the anonymous account does not have the necessary rights to access
> > the file, IIS will need another user account. If you have enabled
> > "Integrated authentication" or "basic authentication", you will be
> > prompted to log on. If no other authentication method is enabled, besides
> > anonymous access, you will immediately see a "deny" status code.
> >
> > In your case, the problem seems to be that the IUSR_Machinename user
> > account does not have the necessary rights to access the files. I say this
> > because you say it works if you change IUSR_Machinename to a domain admin
> > account, which probably have more rights.
> >
> > So change back to using the IUSR_MachineName account, and then start
> > looking in the log file to identify the file(s) that this account does not
> > have sufficient access to.
> >
> > --
> > Regards,
> > Kristofer Gafvert
> > http://www.gafvert.info/iis/ - IIS Related Info
> >
> >
> > Donna S. wrote:
> >
> > >Hello,
> > >
> > >I'm installing Trend Micro's OfficeScan console on a windows 2003 server
> > >with IIS 6.0. the IUSR_servername account is being used on a virtual
> > >website.
> > >When I try to access the website it prompts me for authentication for the
> > >domain. How can I set this up, so no authentication will be prompted? I've
> > >tried using the domain admin account inplace of the IUSR_servername account
> > >and I can connect without being prompted. I don't want to use this high of
> > >an
> > >authority account. I've tried to make a domain account that is part of the
> > >domain users and domain guests...but then I'm prompted again for
> > >authentication. Idealy, I would like to user the local IUSR_servername
> > >account
> > >
> > >what are the steps that I need to do to configure it properly?
> >