Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username

Discussion in 'Scripting' started by Luis Garcia, Nov 15, 2004.

  1. Luis Garcia

    Luis Garcia Guest

    Hi,

    I have IIS 6 installed and runnning. I try to denny write access to the user
    IUSR_%COMPUTERNAME% in the root directory using the xcacls.vbs tool:

    cscript xcacls.vbs d:\inetpub\wwwroot /E /D IUSR_%COMPUTERNAME%:W

    The following rigths are dennied:
    SYNCHRONIZE
    FILE_WRITE_DATA
    FILE_APPEND_DATA
    FILE_WRITE_EA
    FILE_WRITE_ATTRIBUTES

    Then IIS stop serving pages, it requires authentication.

    If I aplpy the same setting using the GUI, only the last four rights are
    dennied, and the system works properly.

    Can anybody help me?

    Thanx
     
    Luis Garcia, Nov 15, 2004
    #1
    1. Advertisements

  2. Luis Garcia

    Roger Abell Guest

    ?? help you with what ?
    First, do not use /D deny, instead, remove what should not
    be allowed. The identities need Sync as they will want to
    hook in order to be notified of changes.
     
    Roger Abell, Nov 21, 2004
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.