My Windows 2003 server with IIS is not a member of a domain. From iis I need to access a shared folder on a file server that is part of a Windows domain. I created the same local users on both servers. I created a virtual directory within iis with a UNC path to the shared folder using the "connect as" credentials of the local user. I can see the shared folder and files within iis. Using internet explorer I am unable to reach the shared folder I continue to be asked to provide a username/password. I've tried using usernames with full permissions to the shared folder but still can not access it. Does anyone know how to properly setup iis to connect to a shared domain folder from a iis server that is not part of a domain?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
If you created a specific user for this connection and have granted access to this user for both the share and NTFS (file system) then it sounds like you have one step left to get this working.
You now need to change the anonymous ID account reference for the virtual directory on the IIS server.
You need to enter the ID and password in the anonymous section of the security tab.
Within the IIS virtual directory I have tried setting the "connect as" credentials to match that of a domain user that has BOTH share and ntfs "full permission" to the domain folder share. Doing this I am able to see the folder/files within IIS of the folder share on the domain file server. I have also tried ticking the option to " Always use the authenticated users credentials when validating access to the network directory" within "Connect as". Doing this I too can see the file/folders of the network share within IIS. I'm having problems when trying to access with internet explorer. Upon entering the site www.site.com/virtual_direc
Hi,
look at the web site logs so you can see just what username IIS is trying to use to access the remote share.
remember that when you access through IIS manager, you are seeing the remote share using your own logged on credentials (e.g. local admin) - when accessing via IIS, you are using the web server credentials.
Is the data on the remote share static content (images, html, etc)? If there is some kind of scripts or executables, you will need to check the application pool identity as well.
Cheers!
>> I checked the iis logs, it does not show a username but only an ip address from the system
then it is trying to access using the anonymous web user.
make sure that the remote system has a local user that matches the IUSR_<computername> of the IIS machine. Make sure that the passwords match by manually resetting passwords for the same username on both servers. Make sure that the IUSR_<computername> user has read access to the share AND to the ntfs filesystem on the remote system.
Alternatively, create a new local user on each server - call it something like IISwebuser - and make passwords the same on both and add ntfs and share rights to the remote location.
Cheers!
I recommend, as in my last post, creating the new account and over-riding the anonymous account for just this one directory reference in IIS.
Another thing to check, if you are over-riding the anonymous credentials, or using the connect as option, make sure that you disable the WIA (Windows Integrated Authentication) option for the VD. The fact that you are getting prompted for credentials makes me think that this is enabled.
Okay we are making some progress. In iis virtual directory I have selected "always use the authenticated users credentials when validating access to the network directory". I am only using "basic authentication". I have created a same local user/password on the iis server AND domain file server. I have given the local user full ntfs and share permission to the domain folder. When using IE browser I'm presented a logon dialog and use the local username and password. This works I can see the doamin folder/files. However if I try to use a domain user account that has full share AND ntfs permission to the domain folder it fails. I am entering domain\username and the iis logs show this as well. How do I configure this to allow the use of domain user accounts?
Hi,
all servers, including the IIS and the destination host, must recognise those domain credentials /and/ that domain user must have privileges to access the ntfs location/s.
when any one part of the system (client, IIS, UNC server) are not part of the domain, it is very difficyult to acheive (perhaps impossible)
Cheers.
Business Accounts
Answer for Membership
by: meverestPosted on 2009-06-21 at 17:53:06ID: 24679192
Hi,
make sure that you grat appropriate access rights for the anonymous web user (or logged on user - if the web site requires log on first) to BOTH share used to access the remote site as well as to NTFS on the remote filesystem.
Cheers.