Windows Forum

Ask something
Discussion Locked

What the heck?!

0 helpful
5 replies

by tim d il

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey All:
I just installed an upgrade to Windows 2000 from Windows 98 on a machine I'm using as an intranet website server. Since installing IIS, I'm not able to access the Intranet without having to use a user name & ID that I never assigmed, therefore I don't know. Any thoughts? Your email is appreciated.

5 replies

by joseph moore

IIS creates and uses the machine account IUSR_"MACHINENAME" for the anonymous browsing access of viewing web pages.
"MACHINENAME" is your Win2K machine name, BTW., So, if your system is called MYSYSTEM, the user account used would be IUSR_MYSYSTEM
If you want to change this to another user account, then do the following:
Open up the ISM (Internet Services Manager).
Right-click on your intranet web site -> Properties -> Directory Security.
Click Edit on the Anonymous Access and Authentication Control section.
IF anonymous access is checked, then click the Edit button. This brings up the account that is being used for web site browsing (the IUSR account, most likely). Click the Change button, browse to the account you used to use, enter in the password for it, and click OK until all of the boxes are closed.
Now, try and browse the web site.

hope this helps

by tim d il

The above is a lie. This actually does help me, but not 100%. I do want to password IIS and the website affiliated with it, but I want to have each user have his or her own user name & password. How would I go about doing that? Another question is how can I set up IIS to know that each user with such & such IP address is alright to connect without a user ID & password (interoffice IP address)? If that didn't make any sense, please let me know. Thank you!

by joseph moore

Oh, so you DO want the login/password challenge/response window to come up! That is different!
Open ISM -> Properties on your web site -> Directory Security tab -> Edit button under Anonymous access and Authentication Control
Now, uncheck the anonymous access checkbox.
Check the Integrated Windows Authtication.
Click OK to save the changes.

Next, set up the NTFS security permissions on your web server's web site files/folders to allow all of your users to access the site. If your web server is a part of your domain, then just add the Domain Users group to have at least Read rights on the web site.

Ok, now have your users go to the web site (the IP address of your intranet web server) in Internet Explorer browser (Netscape does not work with the Integrated Windows Authentication)option). When they do, they should get the initial login/password/domain box. Have them fill in their info.

That handles that!

by joseph moore

Now, in regards to your second question, on how to AVOID having the users log into the web site when they are in the office, the only way I have gotten that to work is to NOT use the IP address of the web server when in the office.
So, if your web server has an IP of 10.1.1.5, and say it has a machine name of MYWEBSERVER.
With the Windows challenge/response enabled, going to http://10.1.1.5 will bring up the login box.
For the users who need to get in but you DON'T want them to log in, have them go to:
http://MYWEBSERVER

That way, they will communicate to the web server over Named Pipes, just like if they opened a shared folder on the web server. The web site should open with no challenge/response necessary, because the integrated authentication is being handled at a server level, as opposed to a HTTP protocol IP address method.

There is probably a better way to describe why it works, but I don't know it! It does work, that is all I know!

hope this helps

by tim d il

Joseph Moore: Hmm... today it works without much, if any, complaining. The 2000 thing confuses me! There's more to the story, but that's a story I ain't ready for tonight. :) It's going to work out, though.

This discussion is closed to new replies.