Solved

Authentication on Local Intranet issue

Posted on 2013-01-08
6
238 Views
Last Modified: 2013-02-27
I've recently moved a local Intranet site from one server running IIS6 to another running IIS7.  Everything seems fine apart from on accessing the site I get challenged to "Connect to the localserver.localdomain.com.

On entering the local Admin and password I get full access, however the only username and password that does work is the local admin.  What I can't work out is what access I'm being challenged for.  I have made myself a member of the local admin group without any success, I have changed the permissions on the files so I have local admin rights on them without any success.

Any help would be great.  Picture attached.Authentication challenge
0
Comment
Question by:edwalters
  • 3
  • 3
6 Comments
 
LVL 5

Assisted Solution

by:9l1ves
9l1ves earned 500 total points
ID: 38754346
From the looks of it you have either basic or Integrated authentication running. Basic would be my guess.

To turn it to no authentication (Assuming you want this?):
Open IIS manager
Expand Sites
Select your Site
Double Click Authentication
Right click Anonymous and Select Enabled


If you dont want anonymous access then enable the access you want:
http://www.iis.net/learn/manage/configuring-security/understanding-iis-url-authorization#UsingDomain
0
 
LVL 1

Author Comment

by:edwalters
ID: 38754450
I have Windows authentication and anonymous authentication enabled, if I disable the Windows authentication that pretty much stops everything and I get the

"401 - Unauthorized: Access is denied due to invalid credentials."

I have looked through the config file and can't find anything obvious in there.
0
 
LVL 5

Expert Comment

by:9l1ves
ID: 38754503
if you right click and edit anonymous authentication what does it give you in there?
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 1

Author Comment

by:edwalters
ID: 38754656
The choice between

Specific User
Application Pool Identity

at the moment it is set to Application Pool Identity but it was originally Specific User.
0
 
LVL 5

Accepted Solution

by:
9l1ves earned 500 total points
ID: 38754729
That should be set to Specific user, Should be IUSR i believe.
Also make sure that the following accounts have  read permission to the folder :
Network Service
IUSR_(machine name)
IIS_WPG
IIS_IUSRS
0
 
LVL 1

Author Comment

by:edwalters
ID: 38758394
I have all those permissions on the directory and this morning I did a Robocopy across from the working server so the permissions should be the same, but I get the same error.

As long as I enter the local admin username and password it works, it's frustration to say the least.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

27 Experts available now in Live!

Get 1:1 Help Now