[thelist] IUSR_machinename - is it part of 'everyone' group?

[Brian King]

I am sorry.  I didn't answer the question did I, lol.
No the IUSR_machine name account must be explicitly added to the group.  I
get a little foggy there, (haven't done it in a while).  I think you may
have to create the account and add it to the domain first, I forget.  I
don't think that the account exists normally.  Maybe someone else can chime
in here.  I always turn off Anonymous access and go with the NT privs.

1 note: If you want to implement the NT privelages on the Intranet thingy.
You have to turn off the anonymous access.  Otherwise the anonymous account
is passed on anyways, (it takes presidence).

Brian W. King

 -----Original Message-----
From: 	thelist-admin at lists.evolt.org [mailto:thelist-admin at lists.evolt.org]
On Behalf Of Canfield, Joel
Sent:	Monday, June 25, 2001 10:42 AM
To:	'thelist at lists.evolt.org'
Subject:	RE: [thelist] IUSR_machinename - is it part of 'everyone' group?

<snip>
If Anonymous access is unchecked, then you are passing along the NT account
name to the share.  On an Intranet set-up this is easier to manage and more
desirable whereas you don't have to manage two sets of folder permissions,
</snip>

Interesting idea, which we may decide to implement, but it doesn't answer
the question: is the IUSR_machinename account part of the NTFS group
'Everyone' ? I think not, but can't find any hard evidence.