Solved

External SharePoint Foundation Site needs Public Access

Posted on 2013-02-07
10
428 Views
Last Modified: 2013-02-26
I have a Windows 2008 R2 system with SharePoint Foundation 2010 installed and have created a basic site that I can see internally on my network without getting prompted for credentials.

I want this to be Public Facing and external DNS points to the page but promptes for credentials.  I do not want any credentials needed and no ability to do anything but to see what's published.  Do I need to edit permissions at the IIS site level (port 80) or is this in SharePoint?
0
Comment
Question by:iNetSystem
  • 6
  • 4
10 Comments
 
LVL 9

Expert Comment

by:BobHavertyComh
ID: 38864422
It's in SharePoint. Go to Central Admin -  application management - manage web applications -  then find your application and click on it until it is blue. Then, with that app selected, click on authentication providers in the ribbon above, and then click on the link that says default, and you will see where you can enable anonymous access. This allows it, but they can write as well as read. So to take care of that, with the app still selected and blue, click on anonymous access in the ribbon, and choose "deny write" and that prevents them from writing. If you want to disable anonymous access, all you have to do is to disable it, and all your regular, windows authentication settings will kick back in. Then, when you enable it again, your anonymous access settings should immediately be at "deny write" when it is enabled.

If you want to have both an internal site with credentials AND and external facing site that is anonymous, then you should extend your internal site first, which would create a mirror of your internal site, but with different credential requirements. If you don't care what people see and nobody will be entering passwords, then you don't even need to make this extended external mirror site use ssl.
0
 

Author Comment

by:iNetSystem
ID: 38864706
Hi - I've enable Anonymous per your steps but in that same area Integrated Windows Auth is still checked.  I have tried accessing the site from an external source and am still prompted for name and password.

Ideally I want people to see this on the internal network as well as a public area.
0
 
LVL 9

Expert Comment

by:BobHavertyComh
ID: 38864764
Just as a test, since it seems this site isn't in any critical use for you yet, go back to the same thing i said and uncheck windows authentication and basic authentication. You really want to do this for your extended site after you create it, but this could be a quick test. If it works, enable windows authentication again quickly, and do these steps with your extended site after you create it. If this still doesn't work, then yes, go to the iis manager, find your site and disable windows auth and enable anonymous access.
0
 

Author Comment

by:iNetSystem
ID: 38864819
when disabling windows auth and trying to browse in externally I get a 401 UNAUTHORIZED
0
 
LVL 9

Expert Comment

by:BobHavertyComh
ID: 38864840
Then you will need to check your site settings in the iis manager, and set it to anonymous. But set this all back after you can at least get it to work, and apply these things to the extended site after you create it.
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 

Author Comment

by:iNetSystem
ID: 38865211
OK this is driving me nuts.  I can access the site under my credentials without and authentication prompts but under another mock user they get prompted.  I am however a Farm Admin and most likely the Site Admin but I built this weeks ago and can't remember.

What can I try?  I need to publish something ASAP.

Thanks for your help!
0
 

Author Comment

by:iNetSystem
ID: 38865218
Do I have to create an anonymous user explicitely in Central Admin Security?
0
 

Author Comment

by:iNetSystem
ID: 38865237
also can you explain why I need an extended site?  I just need to post on the home page some generic information.
0
 

Author Comment

by:iNetSystem
ID: 38865408
In this link I found
http://www.topsharepoint.com/enable-anonymous-access-in-sharepoint-2010
Under step 8 I do not have the "Anonymous Access" button as shown.
0
 
LVL 9

Accepted Solution

by:
BobHavertyComh earned 500 total points
ID: 38865515
Did step 8 work? About why you should extend the site, exposing your SharePoint site over the internet using basic authentication can be somewhat risky, although if you configure everything right and use ssl to encrypt any passwords being sent, usually you are fine. When you open your site up to the public as anonymous access, you are really opening yourself up too much and so many things can now happen. So it's a good idea to never have problems associated with public access bring down your internal site. But i didn't realize that you merely wanted to quickly and temporarily share one page with the public. You can do that.

http://www.apps4rent.com/support/kb/article/how-to-enable-anoynymous-access-page-to-everyone-sharepoint-site

Notice step 5 in particular. I apologize, but I thought you wanted the whole site to be permanently viewable by the public without authentication. So keep anonymous open at every level, confirm anonymous access viewing of the page, and then close one level at a time (IIS, Central Admin) until it fails, to see which levels you need open and which you don't.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SharePoint Designer 2010 has tools and commands to do everything that can be done with web parts in the browser, and then some – except uploading a web part straight into a page that is edited in SPD. So, can it be done? Scenario For a recent pr…
Lync server 2013 or Skype for business Backup Service Error ID 4049 – After File Share Migration
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now