IIS and Security

[tomcat99]

Hi ASP Gurus,
I'm tring to solve a security problem:
I have a web site under IIS 4.0 with ASP. On my web folder I make following settings: Allow Anonymous Access=disable and Windows NT Challange/Response=enable. All the users who want to access my web site will use a specified user/password pair.
From my page x.asp I call a COM component written in VB which opens a file located on a remote machine.
Here comes the problem: with the setting described above I keep receiving an error when tring to access specified file.

If I make Allow Anonymous Access=enable the COM component is able to open the file. On the target machine the user/password pair used by all possible web clients exist and the user has full rights on the file I'm tring to open.

Is there anything that I'm missing?

thanx.
tomcat

[Johnny101]

I'm not sure that just because you'r user is logging in that that's the profile that IIS is using to access resources. Try setting read permissions on the target file to include IUser_{your machine name}. That should do it because IIS is still the user trying to access the file even though it authenticated the web client with a different U/P.

Hope this helps,

John

John Pirkey
MCSD
http://www.ShallowWaterSystems.com
http://www.stlvbug.org

[Dr_Michael]

1. Have you created the appropriate users on your server?
2. Does your server exist inside proxy? NT Challenge/Response DOES NOT support proxy server.

Michael Vlastos
Automation Engineer
Intracom, Research & Development Department
Athens, Greece