Create New Website In IIS

Guys, I want to set up my asp.net application to work on our webserver
with IIS 6/Windows Server 2003, but I do NOT want it to occupy the
'Default Web Site' at 'C:\Program Files\inetpub\wwwroot'. I would,
however, like to keep the default web site as-is.

So I opened up IIS manager and added a new web site. When doing this I
chose "Unassigned/all" for IP address, "80" for port, and then I
entered a FQDN for the header portion. On the next screen I browsed to
a folder on a different hard drive that contains the website. I also
checked the box that read "Allow anonymous access." All seemed okay
when the wizard completed successfully, and the site showed as up and
running in IIS manager.

But now when I try to browse it I am always prompted with a "Connect
to...[FQDN]" logon box. Why can I not view the site in my browser
without logging on? I checked properties for the site under the
directory security tab..."Allow anonymous access" is checked.

???

TIA,
JP

Re: Create New Website In IIS

You also need to make sure that the anonymous account used has proper NTFS
rights.

IIS cannot bypass NTFS security, it has to use some kind of user
credentials to authenticate to the file system. When you enable anonymous
access, and the user does not authenticate, IIS uses the credentials of
the anonymous user account (by default IUSR_machinename) to access the
files. If this user account does not have proper rights, the user will be
prompted to supply other credentials.



--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


joey.powell@topscene.com wrote:

>Guys, I want to set up my asp.net application to work on our webserver
>with IIS 6/Windows Server 2003, but I do NOT want it to occupy the
>'Default Web Site' at 'C:\Program Files\inetpub\wwwroot'. I would,
>however, like to keep the default web site as-is.
>
>So I opened up IIS manager and added a new web site. When doing this I
>chose "Unassigned/all" for IP address, "80" for port, and then I
>entered a FQDN for the header portion. On the next screen I browsed to
>a folder on a different hard drive that contains the website. I also
>checked the box that read "Allow anonymous access." All seemed okay
>when the wizard completed successfully, and the site showed as up and
>running in IIS manager.
>
>But now when I try to browse it I am always prompted with a "Connect
>to...[FQDN]" logon box. Why can I not view the site in my browser
>without logging on? I checked properties for the site under the
>directory security tab..."Allow anonymous access" is checked.
>
>???
>
>TIA,
>JP

Re: Create New Website In IIS

On Nov 6, 2:59 pm, "Kristofer Gafvert"
wrote:
> You also need to make sure that the anonymous account used has proper NTFS
> rights.
>
> IIS cannot bypass NTFS security, it has to use some kind of user
> credentials to authenticate to the file system. When you enable anonymous
> access, and the user does not authenticate, IIS uses the credentials of
> the anonymous user account (by default IUSR_machinename) to access the
> files. If this user account does not have proper rights, the user will be
> prompted to supply other credentials.
>
> --
> Regards,
> Kristofer Gafverthttp://www.gafvert.info/iis/- IIS Related Info
>
>
>
> joey.pow...@topscene.com wrote:
> >Guys, I want to set up my asp.net application to work on our webserver
> >with IIS 6/Windows Server 2003, but I do NOT want it to occupy the
> >'Default Web Site' at 'C:\Program Files\inetpub\wwwroot'. I would,
> >however, like to keep the default web site as-is.
>
> >So I opened up IIS manager and added a new web site. When doing this I
> >chose "Unassigned/all" for IP address, "80" for port, and then I
> >entered a FQDN for the header portion. On the next screen I browsed to
> >a folder on a different hard drive that contains the website. I also
> >checked the box that read "Allow anonymous access." All seemed okay
> >when the wizard completed successfully, and the site showed as up and
> >running in IIS manager.
>
> >But now when I try to browse it I am always prompted with a "Connect
> >to...[FQDN]" logon box. Why can I not view the site in my browser
> >without logging on? I checked properties for the site under the
> >directory security tab..."Allow anonymous access" is checked.
>
> >???
>
> >TIA,
> >JP- Hide quoted text -
>
> - Show quoted text -

I had already tried testing it by allowing "Everyone" "Full Control",
but that didn't fix the problem. Later I removed "Everyone" and
replaced it with the IUSR_[MACHINENAME] account; that didn't work,
either.

Re: Create New Website In IIS

Hi,

Use filemon/procmon to see which user gets denied to the files.
--
Regards,

Glenn Fecunda
http://adaptive-techniques.net


joey.powell@topscene.com wrote:

> On Nov 6, 2:59 pm, "Kristofer Gafvert"
> wrote:
> > You also need to make sure that the anonymous account used has
> > proper NTFS rights.
> >
> > IIS cannot bypass NTFS security, it has to use some kind of user
> > credentials to authenticate to the file system. When you enable
> > anonymous access, and the user does not authenticate, IIS uses the
> > credentials of the anonymous user account (by default
> > IUSR_machinename) to access the files. If this user account does
> > not have proper rights, the user will be prompted to supply other
> > credentials.
> >
> > --
> > Regards,
> > Kristofer Gafverthttp://www.gafvert.info/iis/- IIS Related Info
> >
> >
> >
> > joey.pow...@topscene.com wrote:
> > > Guys, I want to set up my asp.net application to work on our
> > > webserver with IIS 6/Windows Server 2003, but I do NOT want it to
> > > occupy the 'Default Web Site' at 'C:\Program
> > > Files\inetpub\wwwroot'. I would, however, like to keep the
> > > default web site as-is.
> >
> > > So I opened up IIS manager and added a new web site. When doing
> > > this I chose "Unassigned/all" for IP address, "80" for port, and
> > > then I entered a FQDN for the header portion. On the next screen
> > > I browsed to a folder on a different hard drive that contains the
> > > website. I also checked the box that read "Allow anonymous
> > > access." All seemed okay when the wizard completed successfully,
> > > and the site showed as up and running in IIS manager.
> >
> > > But now when I try to browse it I am always prompted with a
> > > "Connect to...[FQDN]" logon box. Why can I not view the site in
> > > my browser without logging on? I checked properties for the site
> > > under the directory security tab..."Allow anonymous access" is
> > > checked.
> >
> > > ???
> >
> > > TIA,
> > > JP- Hide quoted text -
> >
> > - Show quoted text -
>
> I had already tried testing it by allowing "Everyone" "Full Control",
> but that didn't fix the problem. Later I removed "Everyone" and
> replaced it with the IUSR_[MACHINENAME] account; that didn't work,
> either.

Re: Create New Website In IIS

On Nov 6, 1:24 pm, joey.pow...@topscene.com wrote:
> On Nov 6, 2:59 pm, "Kristofer Gafvert"
> wrote:
>
>
>
>
>
> > You also need to make sure that the anonymous account used has proper NTFS
> > rights.
>
> > IIS cannot bypass NTFS security, it has to use some kind of user
> > credentials to authenticate to the file system. When you enable anonymous
> > access, and the user does not authenticate, IIS uses the credentials of
> > the anonymous user account (by default IUSR_machinename) to access the
> > files. If this user account does not have proper rights, the user will be
> > prompted to supply other credentials.
>
> > --
> > Regards,
> > Kristofer Gafverthttp://www.gafvert.info/iis/-IIS Related Info
>
> > joey.pow...@topscene.com wrote:
> > >Guys, I want to set up my asp.net application to work on our webserver
> > >with IIS 6/Windows Server 2003, but I do NOT want it to occupy the
> > >'Default Web Site' at 'C:\Program Files\inetpub\wwwroot'. I would,
> > >however, like to keep the default web site as-is.
>
> > >So I opened up IIS manager and added a new web site. When doing this I
> > >chose "Unassigned/all" for IP address, "80" for port, and then I
> > >entered a FQDN for the header portion. On the next screen I browsed to
> > >a folder on a different hard drive that contains the website. I also
> > >checked the box that read "Allow anonymous access." All seemed okay
> > >when the wizard completed successfully, and the site showed as up and
> > >running in IIS manager.
>
> > >But now when I try to browse it I am always prompted with a "Connect
> > >to...[FQDN]" logon box. Why can I not view the site in my browser
> > >without logging on? I checked properties for the site under the
> > >directory security tab..."Allow anonymous access" is checked.
>
> > >???
>
> > >TIA,
> > >JP- Hide quoted text -
>
> > - Show quoted text -
>
> I had already tried testing it by allowing "Everyone" "Full Control",
> but that didn't fix the problem. Later I removed "Everyone" and
> replaced it with the IUSR_[MACHINENAME] account; that didn't work,
> either.- Hide quoted text -
>
> - Show quoted text -


Please report the actual IIS web log entry for the access denied.

The status/substatus will determine the correct action.

http://blogs.msdn.com/david.wang/archive/2005/07/14/HOWTO_Di agnose_IIS_401_Access_Denied.aspx


I think you are getting 401.1, probably because your anonymous user/
password is not valid (or anonymous user is denied login by group
policy or something like that). Basically, when you request a resource
via anonymous authentication, IIS has to login the designated
anonymous user. If IIS fails for whatever reason, it will get a 401 --
which results in the browser popping up that username/password dialog
box.

If it is a 401.1, the Win32 error will give you clues as to what is
wrong and how to correct it.

Doing anything else is simply guessing and does not solve the problem.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//