Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Folder Share Permissions For HTTP Virtual Directory

Posted on 2004-09-15
27
Medium Priority
?
413 Views
Last Modified: 2013-11-15
I have a folder on one server that is shared. That folder is also a virtual directory in an FTP site on another server. The permissions for that work fine. I have write access, everyone else has read only. I want to add this folder as an HTTP virtual directory on the same server as the FTP site. When I set it up though and try to log in, it won't accept my login. However, if I add IUSR_<SERVERNAME> to the share permissions it works, but allows anonymous access, which I do not want. The permissions on the folder for individuals is fine (it's the same share that the FTP virtual directory uses....). I just need to add some sort of system account so that the IIS services on the remote server can read the permissions on the share. What folder/share permissions do I have to have for it to work as an HTTP Virtual Directory on the remote server? As always, thanks for your help.
0
Comment
Question by:Grime121
  • 14
  • 13
27 Comments
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12072575
hi,

on your iis webdav must be enabled (by default prohibited) you created under iis / default webpage a virtual directory:
 (i think you already did)
then:
------
additional to security and share:
additional you must configure the properties of the folder
websharing tab
share this folder (give  the sharename)
edit properties (enable directory browsing) <= else they don't see the contents and it seems they cannot access the page


karel
0
 
LVL 1

Author Comment

by:Grime121
ID: 12074296
I don't have IIS installed on the server that as the folder. Therefore I don't have a webshare tab. Do I have to have IIS installed in order to share it on another computer? I thought websharing just added the folder as a virtual directory on the local computer.
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12074766
iis is handling this kind of stuff
you must install iis
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 1

Author Comment

by:Grime121
ID: 12076156
I understand I have to install IIS on the server that is running the webpage, but it has to be installed on the server that hosts the folder share as well? That's kind of strange.
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12076430
no you dont have to install iis installed on the server thats shares the folder
iis must installed on a server that has access to that folder
the advantage of a virtual directory is that it will make the shared folder availabe using iis to the internet/intranet

karel
0
 
LVL 1

Author Comment

by:Grime121
ID: 12076678
Ok, how do I add the webshare then? When I go to the properties on the shared folder from the computer that has IIS the only tabs I see are General, Security, and Customize. There is no Webshare tab like there are for local folders on the IIS server.
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12076930
on the host where the share resides , there you must configure the tab websharing
0
 
LVL 1

Author Comment

by:Grime121
ID: 12076992
Let me be more specific about the error. The virtual directory works fine. It just doesn't let me log in. After three tries it tells me 'You are not authorized to access this page'. These are the permissions I have on the folder:

Share Permissions:
Administrators = Full Control
SYSTEM = Full Control
Everyone = Read

Security Permissions:
Administrators = Full Control
SYSTEM = Full Control
CREATOR OWNER = Special Permissions (Full Control & Take Ownership)
<Foreign Group Account> = Special Permissions (Full Control over their own personal folder in the shared folder)
<Foreign Individual Account> = Read and Execute

With those permissions I can access the FTP Virtual Directory just fine. With my admin account I have full control when connected to the FTP Virtual Directory, everyone in the foreign group account has full access to their subfolders, and the foreign individual account has read and execute access to their subfolder. But, it will not let me log in if I put the same shared folder as a Virtual HTTP Directory.

Now, if I add the Everyone group or the NETWORK account and give them read access, then I can access the HTTP Virtual Directory, but it allows anonymous connections, which I definately do not want.
0
 
LVL 1

Author Comment

by:Grime121
ID: 12077015
There is no webshare tab in the folder properties on the host where the folder resides. I think that tab is only available if you have IIS installed, which it is not. :(

Should I install IIS and try it then? I'd rather not have IIS on that server, but if I have to than I will....
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077081
is the share place on an ntfs partition?
0
 
LVL 1

Author Comment

by:Grime121
ID: 12077152
yes, it's ntfs
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077192
then you are completly right, you must install iis on the server where the share resides
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077201
seems necessairy for http folder sharing
0
 
LVL 1

Author Comment

by:Grime121
ID: 12077275
Ok, I installed IIS on the computer that hosts the share, and I set up websharing. It created a virtual directory on the computer that hosts the share, but I want the virtual directory to be on my main IIS server, not the one that hosts the folder share.
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077314
when you create the virtual directory you must enter

new virtual directory
next
you give a alias you want
in the path name you use an unc name \\folderserver\sharename

0
 
LVL 1

Author Comment

by:Grime121
ID: 12077361
That's what I've been doing all along and I get the access denied error. Here is some more info on the error: "You do not have permission to view this directory or page due to the access control list (ACL) that is configured for this resource on the Web server."

I guess I should have mentioned earlier I have Exchange 2003 installed on the IIS server as well.
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077390
in the websharing tab you need to give browser rights i
are disabled by default
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077402
websharing tab
select share this folder
then goto edit properties
enable the directory browsing



0
 
LVL 1

Author Comment

by:Grime121
ID: 12077467
I enabled it when I created the share
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12077551
check the websharing tab / edit properties button / directory browsing
once more


i have it running over here (right now)
when i disable the directory browsing i receive your error msgs
0
 
LVL 1

Author Comment

by:Grime121
ID: 12077633
When I change it like that on the folder's webshare tab it only effects the virtual directory on the server that hosts the share. The main IIS server that I want to host the webshare is not effected by that because it doesn't use the info from the webshare tab. I did however check the directory browsing setting on the virtual directory on the main IIS server, and it was checked. Just for good measure I enabled everything (read, write, log, dir. browsing, allow scripts & executables, etc.). Still same the error.
0
 
LVL 1

Author Comment

by:Grime121
ID: 12077812
It looks like this could possibly be a larger problem than the permissions on just one virtual directory not working correctly. I tried another virtual directory and I'm getting the same access denied message. I'm not sure if it is normal or not though. The directory I tried was http://<domanname>/OMA. It's a directory that Exchange 2003 made, and I'm not sure what it's for, but Administrators is listed as having full control in the permissions, but I still get the 'unauthorized to view this page' error.
0
 
LVL 6

Accepted Solution

by:
karel_jespers earned 1000 total points
ID: 12078072
i would try to
first create a virtual directory pointing to a share on the host where the iis is running  (the iis you want to use)   <= this must surely work

then create a virtual directory pointing to a share on the host where the other iis is running  


0
 
LVL 1

Author Comment

by:Grime121
ID: 12078899
Ok, you lost me on that.... :)

main IIS server is PENGUIN, and the file server w/ IIS folder that I want to share is FLOUNDER. I want to add \\FLOUNDER\IIS as a virtual directory to PENGUIN's default webpage.

Now, where are you saying I should create these virtual directories?
0
 
LVL 1

Author Comment

by:Grime121
ID: 12078996
Nevermind. I figured it out. This helped: http://support.microsoft.com/default.aspx?scid=kb;en-us;308150 , but then to stop anonymous logins I had to uncheck Enable Anonymous Access under the Directory Security tab in the Virtual Directory Properties. I'm gonna give you the points anyways for the effort :)
0
 
LVL 1

Author Comment

by:Grime121
ID: 12079006
The only thing I wasn't doing correctly when adding the virtual directory was setting it to use a specific account to access the shared folder.
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 12081878
ok fine it worked
goodluck
karel
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
Windows Server 2003 introduced persistent Volume Shadow Copies and made 2003 a must-do upgrade.  Since then, it's been a must-implement feature for all servers doing any kind of file sharing.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Suggested Courses

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question