IIS 6.0 Security Issue - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 08-13-2005, 12:51 PM   #1 (permalink)
Newb Techie
 
Join Date: Apr 2005
Posts: 32
Default IIS 6.0 Security Issue

Server running W2k3SEE and IIS 6.0. I have set up IIS with a basic HTML web page. I can go into IE and type in localhost and it now brings up the site. However, when I go into IE and type in 127.0.0.1 it prompts for a username and password. By clicking on cancel or clicking login, I get the "You are not authorized to view this page" message. Same happens when people try to access the site via the domain or ip. Anonymous connections are enabled with a username and password (IUSR_gateway) however I don’t know the correct password for this account. Is there any way to delete this account and set up a new one with the same name that I know the password for? I couldn’t find any such service that would allow me to do that. Thanks.

-Cameron
__________________

camhabib is offline  
Old 08-13-2005, 01:36 PM   #2 (permalink)
Member (again)
 
macdude425's Avatar
 
Join Date: Jan 2005
Location: Raul's Wild Kingdom...How 'bout that, huh?
Posts: 4,202
Send a message via AIM to macdude425 Send a message via Yahoo to macdude425
Default

I really don't know much about IIS; only that it pales in comparison to Apache.

Have you read the IIS readme?
__________________

__________________



Debian Support Forums!
macdude425 is offline  
Old 08-13-2005, 01:50 PM   #3 (permalink)
Wizard Techie
 
Join Date: Jun 2005
Posts: 3,339
Default

macdude your title needs to be "living in an amish paridis" or "party like it's 1699" again.

Ok make a user account on windows called "website" with no password. Configure IIS to log in with the user name website and no password in the IIS configureation. This will allow for instant connection where visiters do not need to type a username or password. This method has been tested on IIS6.0 I do not know if it works on IIS7.0Beta
__________________
<form action=\"http://www.srsyo.org/tfsearch.php\" method=\"get\">
<input type=\"text\" name=\"search\"> <input type=\"submit\" name=\"submit\" value=\"Search TF before you post!\"></form>
Vista Discussion | 64 Bit Discussion |Microsoft Homepage | Yo Linux | Paul Thurrott | Fire Fox | Thunder Bird | Image Shack | Photo Bucket | Put File | Anti-Spyware | MS Anti-Spyware | Trillian | Anti-Virus | On Line Virus Scan
Tyler1989 is offline  
Old 08-13-2005, 05:49 PM   #4 (permalink)
Newb Techie
 
Join Date: Apr 2005
Posts: 32
Default

That much I know but my question is how do I create that user.
camhabib is offline  
Old 08-13-2005, 06:30 PM   #5 (permalink)
Wizard Techie
 
Join Date: Jun 2005
Posts: 3,339
Default

Go to

Start > Control Panal > User Acounts > Creat a Account



Easy as that
__________________
<form action=\"http://www.srsyo.org/tfsearch.php\" method=\"get\">
<input type=\"text\" name=\"search\"> <input type=\"submit\" name=\"submit\" value=\"Search TF before you post!\"></form>
Vista Discussion | 64 Bit Discussion |Microsoft Homepage | Yo Linux | Paul Thurrott | Fire Fox | Thunder Bird | Image Shack | Photo Bucket | Put File | Anti-Spyware | MS Anti-Spyware | Trillian | Anti-Virus | On Line Virus Scan
Tyler1989 is offline  
Old 08-13-2005, 08:20 PM   #6 (permalink)
Newb Techie
 
Join Date: Apr 2005
Posts: 32
Default

If W2k3SEE had a user panel like XP it would be........ Anyone who uses W2k3 know how?
camhabib is offline  
Old 08-13-2005, 08:31 PM   #7 (permalink)
Wizard Techie
 
Join Date: Jun 2005
Posts: 3,339
Default

I have windows Advanced Server 2000 and Windows Server 2003 web-Data.

Though I am not running it now. Look harder it's in the start menu then there is a control panal (may not be called that) and it does have administravive tools and all that good stuff along with the ability to creat user accounts.
__________________
<form action=\"http://www.srsyo.org/tfsearch.php\" method=\"get\">
<input type=\"text\" name=\"search\"> <input type=\"submit\" name=\"submit\" value=\"Search TF before you post!\"></form>
Vista Discussion | 64 Bit Discussion |Microsoft Homepage | Yo Linux | Paul Thurrott | Fire Fox | Thunder Bird | Image Shack | Photo Bucket | Put File | Anti-Spyware | MS Anti-Spyware | Trillian | Anti-Virus | On Line Virus Scan
Tyler1989 is offline  
Old 08-13-2005, 08:53 PM   #8 (permalink)
Newb Techie
 
Join Date: Apr 2005
Posts: 32
Default

Found the place to add users. Its under Computer Management. Tricky little spot. I reset the password and everythign works fine.
camhabib is offline  
Old 08-13-2005, 11:09 PM   #9 (permalink)
Wizard Techie
 
Join Date: Jun 2005
Posts: 3,339
Default

Great so do your visitors require a password?

You did create a user account called website with no password and told IIS that correct?
__________________
<form action=\"http://www.srsyo.org/tfsearch.php\" method=\"get\">
<input type=\"text\" name=\"search\"> <input type=\"submit\" name=\"submit\" value=\"Search TF before you post!\"></form>
Vista Discussion | 64 Bit Discussion |Microsoft Homepage | Yo Linux | Paul Thurrott | Fire Fox | Thunder Bird | Image Shack | Photo Bucket | Put File | Anti-Spyware | MS Anti-Spyware | Trillian | Anti-Virus | On Line Virus Scan
Tyler1989 is offline  
Old 08-13-2005, 11:30 PM   #10 (permalink)
Newb Techie
 
Join Date: Apr 2005
Posts: 32
Default

No, W2k3SEE by default creates a user named IUSR_servername where servername is the name of the server hosting the IIS service. It was just that while playing around with the IIS I has by mistake changed either the IUSR password or the password stored for it in all the webs. I reset the password, entered it into the webs, and users no longer require a password when accessing the non-secure part of the web. They do require a password when accessing the secure part which is how I want it.
__________________

camhabib is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 11:42 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.