UNC Security

When adding a UNC virtual to IIS 6.0. Does the user account that does the
connection need to be part of a service account to work through IIS? I'm
running to standalone servers and server A is the web and Server B is the
resource server. Server B is sharing the drive for a particular user as
setup on Server B. I add the resource to IIS with the U/P and can view
through IIS Manager, but, when trying to access throug the web, I'm not able
to access the resources.

Re: UNC Security

On Oct 18, 12:08 pm, "Kevin A" wrote:
> When adding a UNC virtual to IIS 6.0. Does the user account that does the
> connection need to be part of a service account to work through IIS? I'm
> running to standalone servers and server A is the web and Server B is the
> resource server. Server B is sharing the drive for a particular user as
> setup on Server B. I add the resource to IIS with the U/P and can view
> through IIS Manager, but, when trying to access throug the web, I'm not able
> to access the resources.


It all depends on configuration.

http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx

If you use the \\server\share syntax for the UNC directory in IIS, it
should work. If you map the \\server\share to a drive letter and use
the drive letter, it won't work because the drive letter mapping is
specific to the user, not entire server. IIS runs code as a different
user for security purposes, so it will never see your drive letter
mapping.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Re: UNC Security

Hmm, thanks and I read through the document, but I'm running into problems.
I've put the user account on both the file server and the web server, and,
when I create the virtual in IIS, I can see the files, but when I try to get
them through the browser, I get a 500 error. I've tried turning off
integrated and setting to only basic authentication, but I'm missing
something...

Any ideas?


"David Wang" wrote in message
news:1192761817.767603.312530@i13g2000prf.googlegroups.com.. .
> On Oct 18, 12:08 pm, "Kevin A" wrote:
>> When adding a UNC virtual to IIS 6.0. Does the user account that does
>> the
>> connection need to be part of a service account to work through IIS? I'm
>> running to standalone servers and server A is the web and Server B is the
>> resource server. Server B is sharing the drive for a particular user as
>> setup on Server B. I add the resource to IIS with the U/P and can view
>> through IIS Manager, but, when trying to access throug the web, I'm not
>> able
>> to access the resources.
>
>
> It all depends on configuration.
>
> http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx
>
> If you use the \\server\share syntax for the UNC directory in IIS, it
> should work. If you map the \\server\share to a drive letter and use
> the drive letter, it won't work because the drive letter mapping is
> specific to the user, not entire server. IIS runs code as a different
> user for security purposes, so it will never see your drive letter
> mapping.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>

Re: UNC Security

Actually, I figured it out. The first dialogue box that pops up about
security, when setting up a virtual, through me.

Thanks.

"David Wang" wrote in message
news:1192761817.767603.312530@i13g2000prf.googlegroups.com.. .
> On Oct 18, 12:08 pm, "Kevin A" wrote:
>> When adding a UNC virtual to IIS 6.0. Does the user account that does
>> the
>> connection need to be part of a service account to work through IIS? I'm
>> running to standalone servers and server A is the web and Server B is the
>> resource server. Server B is sharing the drive for a particular user as
>> setup on Server B. I add the resource to IIS with the U/P and can view
>> through IIS Manager, but, when trying to access throug the web, I'm not
>> able
>> to access the resources.
>
>
> It all depends on configuration.
>
> http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx
>
> If you use the \\server\share syntax for the UNC directory in IIS, it
> should work. If you map the \\server\share to a drive letter and use
> the drive letter, it won't work because the drive letter mapping is
> specific to the user, not entire server. IIS runs code as a different
> user for security purposes, so it will never see your drive letter
> mapping.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>