This is an accurate representation of my environment. I don't see how I do that stuff in script. :-) Is this documented somewhere?
Thanks, Michael -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Schaefer Sent: Wednesday, September 01, 2004 8:28 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] IIS and Scripting Question Can I get a quick clarification here: a) Provisioning application runs on ServerA (which is part of a domain) b) Webserver (serverB) is standalone (not in the domain) c) Provisioning app (on ServerA) needs to create folders and/or files on ServerB Question: Is the Provisioning App itself running on IIS? (ie IIS is also running on ServerA, and the provisioning app is web based). If so, then you could make use of IIS' pass-through UNC authentication system. Create two accounts with the same name: one on serverA, and one on serverB. In IIS Manager on ServerA, add a virtual directory that points to a share on ServerB. When asked what credentials to use, enter ServerB\AccountYouJustCreated and corresponding password. IIS will use this account when connecting to the remote share. Whether you want to do this or not is another question :-) HTH Cheers Ken -------- Original Message -------- > From: "Michael B. Smith" <[EMAIL PROTECTED]> > Sent: Wednesday, September 01, 2004 3:37 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] IIS and Scripting Question > > That would work if the web server were a member server, but not as a > standalone server. You can't add accounts from another server to the > ACLs on a standalone server. > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Perdue David > J Contr InDyne/Enterprise IT > Sent: Wednesday, September 01, 2004 4:30 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] IIS and Scripting Question > > > > I don't know if this would work, but... > > Add the share on your data server to the website as a virtual directory. > Then, add your web server's computer account or the IIS account with > the access that the app needs to your data servers share. I'm not > sure which would be needed to work. > > You could then use whatever your accounting mechanism is on the web > server to control access to the share. > > > > Dave > > > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. > Smith > Sent: Wednesday, September 01, 2004 11:03 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] IIS and Scripting Question > > No, the provisioning application needs to be able to create a folder > and a file within that folder and assign rights. > > > > It can't be a part of the domain (our policy is that shared hosting > servers (excepting our Exchange hosting servers, which have their own > domain) are standalone). > > > > Thanks for the thought. > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al > Sent: Wednesday, September 01, 2004 1:53 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] IIS and Scripting Question > > So really the rights you need are the ability to open a file on a file > share you have rights to? Is it possible to make it part of the domain? > You could use the machine account or the IIS account then. If not, > then the trick here is to allow file system access to the application > (the user-context of the application really). > > > > Would that work? > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. > Smith > Sent: Wednesday, September 01, 2004 1:48 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] IIS and Scripting Question > > I have a provisioning application that runs on a domain member that > needs administrative access to a standalone server. > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al > Sent: Wednesday, September 01, 2004 1:27 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] IIS and Scripting Question > > Credentials other than the ones that IIS is running under? > > > > Personally, I haven't seen a way to do that and wonder why you would > want to do it that way? > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. > Smith > Sent: Wednesday, September 01, 2004 9:33 AM > Subject: [ActiveDir] IIS and Scripting Question > > Is there any way to create a FileSystemObject with alternate > credentials, similar to what I can do with OpenDSObject for an ASP web > page? > > > > Thanks, > > M List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
