Re: Permissions problem with internal website viewable over internet

pj274 wrote:

>
>In Windows SBS 2003 I've a problem allowing Domain Users to access the
>internal website after they've logged into the Remote Web Workplace.
>When they try to click on the "Use My Company's Internal Website" link
>they get "You are not authorised to view this page" and "HTTP Error 403
>- Forbidden: Access is denied.
>Internet Information Services (IIS)".
>
>However an administrator and member of the Domain Admins group can
>click on the "Administer the Company's Internal Website" link and then
>go to the Home page to get to the website from there.
>
>So the problem is with authentication. I'm new to Windows SBS and
>websites and think I must be missing an obvious place to set
>authentication. I've tried in IIS on both Default Website and
>Companyweb to give Domain users permission to access this site but is
>there somewhere else I should also be looking?

This should be set automatically, and you should not need to tinker.

Does Companyweb work as expected for ordinary users internally? (ie
hitting http://companyweb from the LAN)

--
Steve Foster
------------
Please reply only to the newsgroups.
For SSL Certificates, Domains, etc, visit.: https://netshop.virtual-isp.net

pj274 wrote:

>
>This should be set automatically, and you should not need to tinker.
>
>Does Companyweb work as expected for ordinary users internally? (ie
>hitting http://companyweb from the LAN)
>
>--
>Steve Foster
>
>----------------
>
>Hi Steve
>
>Thanks for your reply. The Companyweb does not work internally - users
>get the "error 403 forbidden: access denied etc." message.

How were your user accounts created? Was the SBS Create User wizard used,
or were they created using AD Users & Computers?

If the latter, I'd run the SBS Change User Permissions wizard on them, and
assign the User template role.



>In order to get the website to work over the internet I had to change
>the address in the default.htm file in C:\Inetpub\wwwroot folder from
>http://companyweb to https://FQDN_of_SBS_Server:444. The server has
>been set up to use DynDNS for authentication and therefore the FQDN that
>works is https://domainname.webhop.org:444 (the actual name of the
>server is sbs.domainname.local). So I'm wondering if that is causing a
>problem.

No, you didn't. That internal landing page that SBS has (that lives in
C:\InetPub\wwwroot) is not normally visible externally at all (unless
you're running SBS Premium with ISA installed, and chose to make the
"business card" website publically accessible). It's not the RWW page
(which has the right link in the first place).

Your Companyweb is visible externally as expected through RWW. The 403
indicates a permissions problem (most likely, your user accounts have not
been granted access to Sharepoint).

--
Steve Foster
------------
Please reply only to the newsgroups.
For SSL Certificates, Domains, etc, visit.: https://netshop.virtual-isp.net