Windows Server

Bali · Guest

Hi guys,

Eventhough I have done everything it says in this article
"http://usa1021.wss.bcentral.com/_vti_bin/help/1033/sts/html/wsaprolg.htm"
to setup anonymous access, I am still not able to goto my site
anonymously. I want to be able to open the top-level site without
providing any credentials. I have already given access to the
IUSR_machinename to the folder that the virtual server points to.
Please tell me what could be done or what I might be missing or any
suggestions at all.

Thanks

Sumeet

Mr D. · Guest

First of all, you need to find out if you have mandatory security
profiles on your domain/system. I have added two users to the site and
assigned the reader role to them. I have the mandatory profiles so I
must add a second user (NT AUTHORITY\AUTHENTICATED USERS). If you do
not, then just add the IIS Guest user account to the site and assign it
the reader role.

This is fine, but it does not give anyone the rights to creat sites (If
you have this turned on?). The only way they will be able to do this
is to "Sign on", by clicking the button in the upper right hand corner
of the page.

Hope this helped. It has worked for me? I have not found anywhere
that it talks about the assigning the guest access as a user, except
thru a class I took from MindSharp. Great class!

Bali · Guest

Thanks Mr. D. for your help.

I don't understand what mandatory security profiles mean and how to
check that on my system. Could you please elaborate on that.

Anyways I tried adding the NT AUTHORITY\AUTHENTICATED USERS and the
IIS_usr to the users of the site and still I wasn't able to log on
anonymously.

Just wanted to tell the specifics:
1. The domain on which the WSS site is installed is different from my
local domain but since I am trying to setup anonymous access I
shouldn't have a problem accessing it but it doesn't work.
2. In the IIS settings on the server for the site, the IP address is
set to All unassigned, application pool to MSSharePointPortalAppPool
and under Directory Security->Authenticatoin and access control both
Anonymous Access and Integrated Windows Authentication are checked.

Please let me know if I need to change any of these settings or there
is something more that I need to do.

Thanks again Mr. D. for your reply,

Sumeet

Mr D. · Guest

First of all when you check both the authenticated access and anonymous
access, it can't do both, it will either do one or the other. Try
unchecking the Windows authentication. Why did you have it checked?

When you go to the Site Settings, then Manage users, under domain
groups, do you see the NT Authority\Authenticated Users and the IIS
account under users?

This is where I have them, but again, it is because of the security
profiles. Are you the Domain Administrator in the domain or workgroup
that the site is in? If so, then if you do not know about the
profiles, then I would probably think that there are none. If not,
then you would have to ask them for the info.

If you defenitely do not have them, then remove the NT
Authority\Authenticated Users from Domain Groups. There should only be
Built in Administrators, but leave the IIS guest account.

Try that?

BTW do you have Windows 2003 Server SP1 and Sharepoint SP2 loaded?

	Windows Server Forum Index -> Windows Services	All times are GMT
Page 1 of 1