Security

Ask something
Discussion Locked

Permissions when search index

0 helpful
5 replies

by johnm 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Objective: Web page search displays only the matches to files that the logged in user has NTFS permissions to view. The files are stored on another server, with a virtual directory set up in the IIS4 web server.

IIS4 content indexes the virtual directory "workgroups" a shared directory on an NT4 file server. It connects with the account "intrabrowser". If I give this account full control over all of Workgroups it indexes everything and the problem occurs when I use a web search page and it ignores the NTFS permissions of the logged on user and returns all the matches even if the logged on user should have no right to see certain matches (normally blocked by NTFS rights).

If some folders have only the owning user with any rights to it, then it is not indexed because the account intrabrowser cannot read it, so then if the owning user logs on and searches he cannot find it either.

Additional info: I had this working correctly on a test server I built, but dont know what I have done wrong this time.
No anon permissions on site at all its all NT Challenge/response.

johnm@essex.tec.org.uk

5 replies

by kgosnell

You are not in-sync with the virtual security protocol, and it gets a conflicting message and goes with the default settings. Go to one of the prohibited sites , copy the address and use it to show the Web Master of the Virtual setup , and your requirements, which he/she will check and see if ,and what the conflict is , and advise you on your settings ,or ask for yours to compare in order to resolve it. At least it will determine the level of the problem and narrow it down, as your narative shows it can be anything from a onboard Worm/Virus to an unknown glitch in the software (Or the methodology of the user to circumvent it).

by rachel_s

Normally Access Controls are a part of the index - so they would not see the document from the query results if they do not have access to it.
There is one case where this is disabled - when there is a remote virtual root setup. Access to it is determined by the account configured to access the remote share.

You must of been using the same server on the test bed. Found this info under Technet MS Index Server Guide\Administration\Security.
-Rachel

by johnm

I found out via a newsgroup that you just cant do it......unless you use the full version of Site Server rather than the NT option pack express version.

So I will close the question. Thanks.

This discussion is closed to new replies.