Authorization Problem... I think Group Policy the culprit

I don't know when/why it happened, but it has. Nothing serious, just a tad frustrating. There are a couple places on my web site that require authorization, and now for some reason it is blocking out everybody with access.

Slack Space 1613 This topic was started by ,


data/avatar/default/avatar28.webp

295 Posts
Location -
Joined 2001-07-04
I don't know when/why it happened, but it has. Nothing serious, just a tad frustrating. There are a couple places on my web site that require authorization, and now for some reason it is blocking out everybody with access. NTFS permissions are set correctly and so are IIS security settings. Therefore I am convinced that Policy settings are causing the trouble. My question, when you really get to the meat of it, is this...
 
What policy settings are required for a user/group to access a web page on a Win2k box... besides "Log on Locally"?
 
I don't want to go around carelessly granting policy rights to my groups/individuals. I'm off to Technet now to see if I can find the answer there... I just thought I'd slap the message up here and see if anybody knows off the top of their head.

Participate on our website and join the conversation

You have already an account on our website? Use the link below to login.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This topic is archived. New comments cannot be posted and votes cannot be cast.

Responses to this topic


data/avatar/default/avatar19.webp

3857 Posts
Location -
Joined 2000-03-29
Is the website being hosted on a member server, or a domain controller? Also, is the site configured to resolve accounts to a specific default domain (as a DC would)? Normally, for DCs, altering the "Default Domain Controller" policy is enough; simply add the user group that you want to have access to the secured portions of the site to the "Log on Locally" part of the policy is enough. Anybody have any other ideas?

data/avatar/default/avatar28.webp

295 Posts
Location -
Joined 2001-07-04
OP
The IIS server is also a domain controller, yes. And the appropriate group and users have been given Log On Locally access in the Default Domain Controllers Policy snap-in.

data/avatar/default/avatar28.webp

295 Posts
Location -
Joined 2001-07-04
OP
Well I fixed the problem. It's not the "recommended" way, but it worked. I reinstalled IIS on the box (uninstalled it completely first). Set up the security from scratch etc... and now all is fine. Maybe some SIDs got funkered up there somewhere.