Problem: In a user/password protected directory (website directory), the user, when authenticated) is allowed into the directory but is not allowed access to a .asp file in the same directory. (prompts for u/p)
Platform: IIS4 on NT4 srvr with sp6a. Is the PDC for web farm domain. Web farm has 3 other servers, all BDC’s for the domain. Replication exec also running on all servers.
All servers contain identical software and sp’s.
Has it ever worked: Yes, never had a problem until now.
Background details: We created a user and added him to the directory. In ISM we specied NT authen, no anon to that directory.
When we go to the directory it authenticates ok with the user. But when we try to access an asp file in the same directory we get an access denied after the 3rd attempt.
We verified that the user has read permsissions. We also tried change and full. ISM permissions for that file were standard read. Also tried write.
Any user we create and add to it gets the same result EXCEPT 1. The standard user that we have used for the past year can get in ok when assigned the same permissions as the user we created.
When we set up auditing on both users, I set it up so that it audits failure on the correct user and sucess on the standard user.
In Event editor/Security we receieve an event ID 576 which equals a success for that user at the time it tries to access the asp script. (the asp script is called thru post in an html doc and is supposed to create and send an e-mail, pretty standard nothing fancy)
We have tried recreating recreating the directory from scratch, recreating the user, copying the new user from the one that works.
We commented out the part of asp script that calls an external object to create the e-mail.
Continued below…