Content and scripts on network share

Hi, everyone,

I'm trying to set up an IIS server so that the content for one site
will be stored on a remote file server. Unfortunately, I seem to be
having some authentication problems in that configuration, so I'm
hoping that someone here will have some insight.

Here's the setup:

Web server running IIS 6 on Windows 2003 SP 1
File server running Windows 2000 AS SP 4 (IIS is NOT installed)
Both servers are in the same Active Directory domain, and I want to use
Windows authentication to connect to the site. The Web content
contains ASP scripts.

When I try to connect, I get 401 Forbidden errors indicating, among
other things, that an ACL is present on the resource.

I've done some digging around, but I haven't found any effective
solution.

Any thoughts?

Thanks,

Tom

pand0ra
Fri Sep 22 18:05:44 CDT 2006

Do the IWAM/IUSR accts have the correct permissions to the remote
system/share?

Tom Maddox wrote:
> Hi, everyone,
>
> I'm trying to set up an IIS server so that the content for one site
> will be stored on a remote file server. Unfortunately, I seem to be
> having some authentication problems in that configuration, so I'm
> hoping that someone here will have some insight.
>
> Here's the setup:
>
> Web server running IIS 6 on Windows 2003 SP 1
> File server running Windows 2000 AS SP 4 (IIS is NOT installed)
> Both servers are in the same Active Directory domain, and I want to use
> Windows authentication to connect to the site. The Web content
> contains ASP scripts.
>
> When I try to connect, I get 401 Forbidden errors indicating, among
> other things, that an ACL is present on the resource.
>
> I've done some digging around, but I haven't found any effective
> solution.
>
> Any thoughts?
>
> Thanks,
>
> Tom

Tom
Fri Sep 22 18:20:56 CDT 2006

pand0ra.usa wrote:
> Do the IWAM/IUSR accts have the correct permissions to the remote
> system/share?

So, this might be part of my issue. How do those accounts interact
with the share, and what permissions should they have?

Tom
Mon Sep 25 16:31:33 CDT 2006

pand0ra.usa wrote:
> Do the IWAM/IUSR accts have the correct permissions to the remote
> system/share?

Those are machine local accounts; how can I create a scenario in which
I have the equivalent of those accounts on the Web server and in the
domain?

Steve
Mon Sep 25 21:01:35 CDT 2006

You can create 'domain' user that are the anonymous and application pool. If
you use a domain account as a replacement for network service, this user has
to be in the IIS_WPG group otherwise the app pool won't start. You can use
filemon on the web server to determine what files are getting access denied.
Where I work at (http://www.orcsweb.com) we use NAS servers to serve
content.

Here is a great article setting this process up.
http://www.microsoft.com/windows/windowsmedia/howto/articles/SourcingRemoteContent.aspx

Tx,
Steve Schofield
Microsoft MVP - IIS


"Tom Maddox" <tomaddox@gmail.com> wrote in message
news:1159219892.979934.178010@h48g2000cwc.googlegroups.com...
> pand0ra.usa wrote:
>> Do the IWAM/IUSR accts have the correct permissions to the remote
>> system/share?
>
> Those are machine local accounts; how can I create a scenario in which
> I have the equivalent of those accounts on the Web server and in the
> domain?
>