IIS Authentication over share

I'm having a problem (well, 2 actually) thats preventing me accessing files on a remote machine through IIS. I'm running XP with IIS 5.1, the remote machine is 2000.

Problem #1: Anonymous authentication is enabled, Integrated Windows Authentication is unchecked, Allow IIS to control password is checked. If I uncheck this, I am continually prompted for '"" at localhost' credentials, and am unable to authenticate.

Problem #2: Following some threads I discovered, I have created a IUSR_<MachineName> account on the remote machine and assigned Full Control permissions on the share, folder and file I'm trying to access. No joy here, still getting that lovely 0x80004005 with 'It is already opened exclusively by another user, or you need permission to view its data'. I also created a virtual directory using the UNC path, trying both Admin / IUSR accounts but IIS just shows an error 'stop sign'.

Getting somewhat lost...

the log in should be from the main owner of the account, or a account you've set up to be able to access the machine.

as for the IUSR_<MachineName> that is manily used for web access, should you be hosting a site to the web. In general I wouldn't use this account to RA a machine.


I'm not sure though why you are having probelms logging in using your main admin account.

Hi dude,
Am suspecting some system problems in the installation make sure u install with the latest serivce pack.Try reinstalling IIS .What is the event logs says in the security event log is it showing any access denieds?

Jeethu Joseph
IIS/Asp.net Engineer Microsoft.
http://jeethujoseph.blogspot.com

1st, Create an account on the machine running IIS called "MyWebAccount" and give it a password. Remove it from the computer users group and explicitly assign permissions as if it were the stander IIS user. Then in IIS admin, change the Directory security account to use "MyWebAccount" and uncheck the box for password control giving the password for the account that you just set up.

Then on the other machine, create a user called "MyWebAccount" with the same password as it is set on the other machine. Remove this user from Computer users group and give them explicit permissions on the folder(s) where you need them. Make the Share Full Control for everyone (you should always limit access via NTFS permissions, not share permissions)...

that's it... it should work... IIS will use the "shared account" to read the share and the NTFS permissions on the other machine will control the type of access.

This is for IIS6 but is a helpful article none the less. There is probably an IIS5 equivalent but I don't have a link

http://www.microsoft.com/technet/pr...s/remstorg.mspx

I tried bdreyer's suggestion, and thought things were OK when trying IIS, since I didn't get an immediate permissions error like last time. Instead, IIS just sat there! Local pages were served correctly but got no response when trying to do a simple operation such as reading a share folder modification date.

I tried again, and IIS eventually told me that 'there are too many people trying to access the website at this time'.

I'm thinking I may just wait until the remote box gets replaced with XP and just do a clean install. I wish I could just go over to Apache but thats not an option

Windows non-server OSs are limited to 10 incoming connections... that's probably what you are seeing.

Okay, I've changed the remote PC to a fresh XP box, deleted all users on the IIS box and started afresh. Pretty much the same issue as before - when trying to read/write to the remote share, IIS seems to hang. After that, IIS won't respond at all unless I restart the machine again.

says it all. Any more suggestions....?

Success! The problem? Script Blocking enabled in Norton Antivirus. Thanks for your help