Solved

IUSR accounts not working for anonymous access on all servers in domain

Posted on 2008-10-30
7
526 Views
Last Modified: 2013-12-05
I'm running a domain made of up multiple servers, all which host websites that are configured to have anonymous access through IIS.  They all use the IUSR built in accounts have an IIS control the password.  Last week, all the sites started to prompt for a userid and password where they never did in the past.  IIS appears to be configured properly, and I tried to restore the IIS metabase back to a date where it worked, but this had no effect.  I was thinking about deleting the IUSR accounts and trying an active directory account instead.  Anyone know what would have caused this or how to fix it?
Thanks!  
0
Comment
Question by:RSSIAdmin
  • 3
  • 2
7 Comments
 
LVL 51

Accepted Solution

by:
Ted Bouskill earned 375 total points
ID: 22847762
This has nothing to do with the account the application pool is running under.  The only reason the website will ask for authentication is because 'Windows or Basic' authentication was turned on for the website itself.  Something in the front-end is asking for the authentication.

Even references to objects on another site that isn't anonymous will trigger the authentication dialog.
0
 

Author Comment

by:RSSIAdmin
ID: 22849353
Thanks for the info.  I did change one of my sites to use an AD account and it that stie stopped prompting, which is very confusing.  I'm starting to wonder now if something got changed on the domain controller, maybe in the group policy that would have caused this.  
0
 
LVL 51

Assisted Solution

by:Ted Bouskill
Ted Bouskill earned 375 total points
ID: 22855201
Hmm, I'm not aware of any GPO setting that would change the authentication for a website, however, it is quite versatile so it might be able to do it.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:RSSIAdmin
ID: 22933252
My servers are "operational" beacuse I switched to the AD accounts as opposed to the built-in IUSR, but I am still trying to determine what would have caused this.  Any ideas?
0
 
LVL 3

Assisted Solution

by:Netocrat
Netocrat earned 125 total points
ID: 23050016
IIS Passwords Sync freeware program from http://www.hoststools.com/ will save your day. :)
0
 
LVL 51

Assisted Solution

by:Ted Bouskill
Ted Bouskill earned 375 total points
ID: 23053114
OK, for one the IUSR accounts are remnants from IIS 5.1 and are only used in IIS 6 if you switch a site to IIS 5.x compatibility mode.  Otherwise they run as the accounts defined in the identity tabs for the application pools.

However, what you need to understand is that the worker process authentication is completely different than the front end-authentication.   If you're users are being challenged to access the website it is something configured for the site authentication.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question