IIS/Virtual directory/UNC and domain account

Hi,
I have 3 servers :
- An XP workstation running IIS 6 a Windows 2003 domain
- An Windows file server in the same domain
- An IIS Server NOT in the domain.

I setup a virtual directory using an UNC to a share on the file
server.

Using a network mount, my account can connect to the network share and
access files.
If I try througth IIS, I get a authentfication box under IIS and I get
a 401.1 error

My question is : does the IIS server have to be in the domain ?

I did not see this pre requisite on the net
Thanks for any help

Re: IIS/Virtual directory/UNC and domain account

It does not have to be in the domain. The credentials being used to connect
to the remote share have to be the same user id / password on the web
server. Look in the security event logs on both boxes to see what error you
are getting.

Few good articles in this search.
http://www.google.com/search?hl=en&q=remote+share+IIS

http://www.microsoft.com/technet/prodtechnol/WindowsServer20 03/Library/IIS/0b56f0c2-5043-48a6-9564-2de0cc29c81d.mspx

http://www.iislogs.com/articles/23/ is an article I wrote that might help.

--

Steve Schofield
Windows Server MVP - IIS
http://weblogs.asp.net/steveschofield



"ML" wrote in message
news:1189690121.791889.94260@g4g2000hsf.googlegroups.com...
> Hi,
> I have 3 servers :
> - An XP workstation running IIS 6 a Windows 2003 domain
> - An Windows file server in the same domain
> - An IIS Server NOT in the domain.
>
> I setup a virtual directory using an UNC to a share on the file
> server.
>
> Using a network mount, my account can connect to the network share and
> access files.
> If I try througth IIS, I get a authentfication box under IIS and I get
> a 401.1 error
>
> My question is : does the IIS server have to be in the domain ?
>
> I did not see this pre requisite on the net
> Thanks for any help
>

Re: IIS/Virtual directory/UNC and domain account

Hi

Thanks
But I saw in your article you use a local account.
I want to use end user credential to check access to the datas.

As far I as look on the internet, they need to be in the same domain.
http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx

If IIS and NAS are in the domain, one need to do a particular setup on
the iis computer account to allow access to data on the UNC. So if IIS
is not in the domain, I suppose it can't access data too.
Regards
ML

Re: IIS/Virtual directory/UNC and domain account

I used a local account because my site is anonymous and I need a single
account to access the content.

In your case, you would need to use windows integration authentication.
They would need to be in the same domain. You can turn off anonymous
authentication on the website, the credentials they are logged into their
workstation would be passed through IIS, if they have access to the folder
on the nas server, they gain access. Make sure on the Home Directory tab
the Network Directory Security Credentials has "Always use the authenticated
user's credentials..." checked. Report back if you have continued issues.

--

Steve Schofield
Windows Server MVP - IIS
http://weblogs.asp.net/steveschofield

"ML" wrote in message
news:1190014918.756431.260970@r29g2000hsg.googlegroups.com.. .
> Hi
>
> Thanks
> But I saw in your article you use a local account.
> I want to use end user credential to check access to the datas.
>
> As far I as look on the internet, they need to be in the same domain.
> http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx
>
> If IIS and NAS are in the domain, one need to do a particular setup on
> the iis computer account to allow access to data on the UNC. So if IIS
> is not in the domain, I suppose it can't access data too.
> Regards
> ML
>