IIS Security - Default installations on Vista

7 Jun 2009 9:45 PM

Travis McGee

The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has
Read access to the physical path. Then test these settings again.

Installed Visual Studio 2010 on a Vista Machine that joined into a domain
with IP address (internal) 10.0.0.130
Default Web Site is c:\aWeb (instead of c:\inetpub\www etc)

Application pool identity is NetworkService; everything else is default
default default default default default

http:\\localhost\default.htm on the same machine works.
http:\\10.0.0.130\default.htm on the same machine works

But from another machine nothing works with the ip address or machine name.

Added <domain>\<computer_name>$ to the \aWeb directory, still no default.htm
from another machine.

Why is that? How come "everything default" is constrictive?
It is like you install O/S on hardware and you have to do security/setting
adjustments in order to boot the darn thing for the first time.

14 Jun 2009 4:17 AM

Ken Schaefer

Pass Through authentication is when you want IIS to connect to a remote
server (e.g. \\servername\sharename) for it's content.

You seem to be hosting the content locally.

If you are able to get http://localhost/default.htm working (note the
forward slashes - not backslashes) then IIS is working fine.

You probably want to look at your firewall configuration etc, and ensure
that IIS is "excepted" in your Vista firewall.

Cheers
Ken

Show quoteHide quote

"Travis McGee" <travisGatesMc***@hotmail.com> wrote in message
news:OkDWHp75JHA.2656@TK2MSFTNGP05.phx.gbl...
> The server is configured to use pass-through authentication with a
> built-in
> account to access the specified physical path. However, IIS Manager cannot
> verify whether the built-in account has access. Make sure that the
> application pool identity has Read access to the physical path. If this
> server is joined to a domain, and the application pool identity is
> NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has
> Read access to the physical path. Then test these settings again.
>
> Installed Visual Studio 2010 on a Vista Machine that joined into a domain
> with IP address (internal) 10.0.0.130
> Default Web Site is c:\aWeb (instead of c:\inetpub\www etc)
>
> Application pool identity is NetworkService; everything else is default
> default default default default default
>
> http:\\localhost\default.htm on the same machine works.
> http:\\10.0.0.130\default.htm on the same machine works
>
> But from another machine nothing works with the ip address or machine
> name.
>
> Added <domain>\<computer_name>$ to the \aWeb directory, still no
> default.htm
> from another machine.
>
> Why is that? How come "everything default" is constrictive?
> It is like you install O/S on hardware and you have to do security/setting
> adjustments in order to boot the darn thing for the first time.
>
>
>