[thelist] IUSR_machinename - is it part of 'everyone' group?

Brian King BKing at Impact-Technologies.com
Mon Jun 25 07:21:45 CDT 2001


You need to check the permissions for the web folder through the IIS server.
There are two different sets of permissions, a web set and an NT set.  The
web set can work in conjuction with the NT set, (which sounds like what is
happening to you), or independendly.  If the settings are set to work
independently, then the user name that is passed along for access to the
share is the IUSR_[MachineName].  If the web folder permissions are set to
work in conjunction with the NT domain accounts, then the users real NT
account name, along with their permissions are set for access to the share.
You need to go to the IIS server, launch the Internet Information Services
Manger.
Right click on the web folder/project that you are working under, (not the
folder you are trying to share but the web project/folder that the code is
in), and look under the directory security tab.  Click on the edit button
under the Anonymous access and authentication control section.

If Anonymous access is unchecked, then you are passing along the NT account
name to the share.  On an Intranet set-up this is easier to manage and more
desirable whereas you don't have to manage two sets of folder permissions,
(you also need to have the Integrated Windows authentication box checked).
If that still gives you problems there are a couple other things we need to
set up, they should be default settings though and should be ok for you.

Brian W. King







More information about the thelist mailing list