HOWTO: Troubleshoot IUSR_machine Permissions Problem
ID: Q188712
|
The information in this article applies to:
-
Microsoft Visual InterDev, versions 1.0, 6.0
SUMMARY
The following information is meant to provide general guidelines for
troubleshooting permissions problems with the anonymous account
IUSR_machinename and Visual InterDev.
Many permissions problems are related to the IUSR_machinename account not
having sufficient permissions to access a resource. The purpose of the
troubleshooting steps below is to create a new anonymous account with
sufficient permissions to access the resources in question; thereby,
confirming that the inability of the anonymous account to access a resource
is due to incorrect permissions settings.
When troubleshooting permissions issues related to the IUSR account, it is
often necessary to reset both directory and file permissions, which can
then be difficult to reset to their original configuration. By creating a
new IUSR_Test account and setting it up as the anonymous account in both
Internet Service Manager and NT User Manager, permissions settings for the
anonymous account can be changed without affecting existing permissions; to
reset permissions back to their original settings simply replace the
IUSR_Test with the original IUSR_machinename account.
MORE INFORMATION
Context
Visual InterDev client working against a Windows NT Server (standalone
local domain IIS_Box) hosting Internet Information Server (IIS); NT Server
(standalone local domain SQL_Box) running SQL Server 6.5 (or shared
directory with Access database); Primary Domain Controller (PDC domain name
DomainName).
Troubleshooting Steps
- Create a new domain account on the PDC machine using the following
domain account: IUSR_Test.
- Grant "logon locally" rights on both the IIS and SQL machine using the
DomainName\IUSR_Test account.
- Start and stop IIS so setting will take affect and shut down the browser
and restart it to assure there is no caching of permissions.
- Set up the new DomainName\IUSR_Test as the anonymous account in the
Internet Service Manager.
- Test the new account by logging off the IIS machine and logging back on
as IUSR_Test and trying to access the resource in question; such as the
.mdb file or the SQL Server database.
- Ensure that the IUSR_Test account can access and run ASP pages.
Additional query words:
Keywords : kbNTOS400 kbVisID100 kbVisID600 kbGrpASP FTAuthent
Version : WINDOWS:1.0,6.0
Platform : WINDOWS
Issue type : kbhowto