restricted directory does not work

16 May 2005 10:50 PM

ren14

I'm having a problem with IIS 6.0. I'm trying to restrict certain
directories on our web server to certain domain users and it's not working
properly. I'm using Basic Auth with anonymous access disabled.

For example: I have a directory called "admin" and I've set the NTFS
permissions on the directory so that I am the only one who has access. When
I log into the site as myself I can access the "admin" folder. When I log in
as another user and try to access the admin folder, it prompts for a password
5 times and then lets the user in.

I've done the same thing on an IIS 5.0 & IIS 4.0 server and I can't figure
out why it won't work on this server. Any thoughts?

17 May 2005 2:14 PM

Tom Kaminski [MVP]

Show quote Hide quote

"ren14" <re***@discussions.microsoft.com> wrote in message
news:970D92F5-0C97-4A39-9515-0ACC01FDDE9A@microsoft.com...
> I'm having a problem with IIS 6.0. I'm trying to restrict certain
> directories on our web server to certain domain users and it's not working
> properly. I'm using Basic Auth with anonymous access disabled.
>
> For example: I have a directory called "admin" and I've set the NTFS
> permissions on the directory so that I am the only one who has access.
> When
> I log into the site as myself I can access the "admin" folder. When I log
> in
> as another user and try to access the admin folder, it prompts for a
> password
> 5 times and then lets the user in.
>
> I've done the same thing on an IIS 5.0 & IIS 4.0 server and I can't figure
> out why it won't work on this server. Any thoughts?

Very strange, I've never seen that happen.

Can you post a section of the IIS log that shows what happens?

--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsserver2003/community/centers/iis/
http://mvp.support.microsoft.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS

17 May 2005 6:20 PM

ren14

OK, it appears to be a Cold Fusion problem (forgot to mention that I was
running CF in my earlier post). When trying to access .htm or .asp files in
a restricted directory users are denied. However, if a user tries to access
a .cfm page, they are asked for a password 5 times and then the page is
displayed.

It's really bizzare and it's driving me nuts! I've posted on a CF forum, so
hopefully I'll get an answer there. Thanks anyway!

-Karen

17 May 2005 5:18 PM

Kyle Peterson

real weird for sure

sounds like it should work

you can always do some protection through code if the server thing keeps
acting up
http://www.powerasp.com/content/code-snippets/advanced-password-protection.asp

Show quoteHide quote

"ren14" <re***@discussions.microsoft.com> wrote in message
news:970D92F5-0C97-4A39-9515-0ACC01FDDE9A@microsoft.com...
> I'm having a problem with IIS 6.0. I'm trying to restrict certain
> directories on our web server to certain domain users and it's not working
> properly. I'm using Basic Auth with anonymous access disabled.
>
> For example: I have a directory called "admin" and I've set the NTFS
> permissions on the directory so that I am the only one who has access.
> When
> I log into the site as myself I can access the "admin" folder. When I log
> in
> as another user and try to access the admin folder, it prompts for a
> password
> 5 times and then lets the user in.
>
> I've done the same thing on an IIS 5.0 & IIS 4.0 server and I can't figure
> out why it won't work on this server. Any thoughts?
>
>