Solved

External SharePoint Foundation Site needs Public Access

Posted on 2013-02-07
10
418 Views
Last Modified: 2013-02-26
I have a Windows 2008 R2 system with SharePoint Foundation 2010 installed and have created a basic site that I can see internally on my network without getting prompted for credentials.

I want this to be Public Facing and external DNS points to the page but promptes for credentials.  I do not want any credentials needed and no ability to do anything but to see what's published.  Do I need to edit permissions at the IIS site level (port 80) or is this in SharePoint?
0
Comment
Question by:iNetSystem
  • 6
  • 4
10 Comments
 
LVL 9

Expert Comment

by:BobHavertyComh
ID: 38864422
It's in SharePoint. Go to Central Admin -  application management - manage web applications -  then find your application and click on it until it is blue. Then, with that app selected, click on authentication providers in the ribbon above, and then click on the link that says default, and you will see where you can enable anonymous access. This allows it, but they can write as well as read. So to take care of that, with the app still selected and blue, click on anonymous access in the ribbon, and choose "deny write" and that prevents them from writing. If you want to disable anonymous access, all you have to do is to disable it, and all your regular, windows authentication settings will kick back in. Then, when you enable it again, your anonymous access settings should immediately be at "deny write" when it is enabled.

If you want to have both an internal site with credentials AND and external facing site that is anonymous, then you should extend your internal site first, which would create a mirror of your internal site, but with different credential requirements. If you don't care what people see and nobody will be entering passwords, then you don't even need to make this extended external mirror site use ssl.
0
 

Author Comment

by:iNetSystem
ID: 38864706
Hi - I've enable Anonymous per your steps but in that same area Integrated Windows Auth is still checked.  I have tried accessing the site from an external source and am still prompted for name and password.

Ideally I want people to see this on the internal network as well as a public area.
0
 
LVL 9

Expert Comment

by:BobHavertyComh
ID: 38864764
Just as a test, since it seems this site isn't in any critical use for you yet, go back to the same thing i said and uncheck windows authentication and basic authentication. You really want to do this for your extended site after you create it, but this could be a quick test. If it works, enable windows authentication again quickly, and do these steps with your extended site after you create it. If this still doesn't work, then yes, go to the iis manager, find your site and disable windows auth and enable anonymous access.
0
 

Author Comment

by:iNetSystem
ID: 38864819
when disabling windows auth and trying to browse in externally I get a 401 UNAUTHORIZED
0
 
LVL 9

Expert Comment

by:BobHavertyComh
ID: 38864840
Then you will need to check your site settings in the iis manager, and set it to anonymous. But set this all back after you can at least get it to work, and apply these things to the extended site after you create it.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:iNetSystem
ID: 38865211
OK this is driving me nuts.  I can access the site under my credentials without and authentication prompts but under another mock user they get prompted.  I am however a Farm Admin and most likely the Site Admin but I built this weeks ago and can't remember.

What can I try?  I need to publish something ASAP.

Thanks for your help!
0
 

Author Comment

by:iNetSystem
ID: 38865218
Do I have to create an anonymous user explicitely in Central Admin Security?
0
 

Author Comment

by:iNetSystem
ID: 38865237
also can you explain why I need an extended site?  I just need to post on the home page some generic information.
0
 

Author Comment

by:iNetSystem
ID: 38865408
In this link I found
http://www.topsharepoint.com/enable-anonymous-access-in-sharepoint-2010
Under step 8 I do not have the "Anonymous Access" button as shown.
0
 
LVL 9

Accepted Solution

by:
BobHavertyComh earned 500 total points
ID: 38865515
Did step 8 work? About why you should extend the site, exposing your SharePoint site over the internet using basic authentication can be somewhat risky, although if you configure everything right and use ssl to encrypt any passwords being sent, usually you are fine. When you open your site up to the public as anonymous access, you are really opening yourself up too much and so many things can now happen. So it's a good idea to never have problems associated with public access bring down your internal site. But i didn't realize that you merely wanted to quickly and temporarily share one page with the public. You can do that.

http://www.apps4rent.com/support/kb/article/how-to-enable-anoynymous-access-page-to-everyone-sharepoint-site

Notice step 5 in particular. I apologize, but I thought you wanted the whole site to be permanently viewable by the public without authentication. So keep anonymous open at every level, confirm anonymous access viewing of the page, and then close one level at a time (IIS, Central Admin) until it fails, to see which levels you need open and which you don't.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Suggested Solutions

If you create your solutions on SharePoint sooner or later you will come upon a request to set  permissions of the item depending on some of the item's meta-data - the author, people assigned as approvers, divisions, categories etc. The most natu…
There is one common problem that all we SharePoint developers share: custom solution deployment. This topic can't be covered fully in this short article, so all I want to do in this one is to review it from a development-to-operations perspectiv…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now