OK. I'm with you.  Now, as my original posting indicated the IUSR_{machineOrHostName} NT user account needs to be enabled, by default,
this user belongs to Web Anonymous Users group (which I guess created by IIS during installation or the like).  Question, how do you find out which directories/folders that the group current has access to?
OK, I could try reverse-approach, look at the current web doc root directory and see who can access it, now, among others, Users, which as
Read & Execute, List dir, Read, does NT imply that the IUSR_{machineOrHostName} user account is sort of part of this Users account?
Otherwise, how?  Secondly, if there's some sort of ghost account, unknown... user account, would that most likely a hacked acount?

Thanks.

>At 01:05 PM 5/13/04, Don wrote:
>
>>Also, your point is?  if HTTP header is messed up / not set up properly in
>>IIS, then NT logon would be prompted when accessing a page?
>
>The most common cause of the NT prompt is failure to grant permissions to
>WebUser for the folder where the files reside.
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to