How to set Directory Security using adsutil?

I am developing a script to install and auto configure IIS 6.0. I would like
to set the IIS Directory Permissions via a command line script to just the
"Integrated Windows Authentication". By default "Anonymous" is also checked.
How do I uncheck "Anonymous" using a script?

Let me know, appreciate your help.
Thanks,
Paul

Tom
Thu Jul 15 15:23:46 CDT 2004

"Paul" <pthakur@apsc.com> wrote in message
news:ujOy5GqaEHA.972@TK2MSFTNGP12.phx.gbl...
> I am developing a script to install and auto configure IIS 6.0. I would
like
> to set the IIS Directory Permissions via a command line script to just the
> "Integrated Windows Authentication". By default "Anonymous" is also
checked.
> How do I uncheck "Anonymous" using a script?

See
http://www.microsoft.com/resources/documentation/iis/6/all/proddocs/en-us/ref_mb_authflags.mspx

--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsserver2003/community/centers/iis/
http://mvp.support.microsoft.com/
http://www.iisfaq.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://www.tryiis.com

Paul
Thu Jul 15 16:36:48 CDT 2004

Thanks Tom.

I am able to change the value in metabase using adsutil.vbs, however when I
create a new web site on the server using IIS manager, it still comes up
with the dialog box with anonymous pre-checked (3rd dialog box where we
specify the path). This is probably a value in the dialog box that needs to
be set to "unchecked". Any clue to where to fix this?



"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:cd6ofe$ct68@kcweb01.netnews.att.com...
> "Paul" <pthakur@apsc.com> wrote in message
> news:ujOy5GqaEHA.972@TK2MSFTNGP12.phx.gbl...
> > I am developing a script to install and auto configure IIS 6.0. I would
> like
> > to set the IIS Directory Permissions via a command line script to just
the
> > "Integrated Windows Authentication". By default "Anonymous" is also
> checked.
> > How do I uncheck "Anonymous" using a script?
>
> See
>
http://www.microsoft.com/resources/documentation/iis/6/all/proddocs/en-us/ref_mb_authflags.mspx
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsserver2003/community/centers/iis/
> http://mvp.support.microsoft.com/
> http://www.iisfaq.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running
IIS
> http://www.tryiis.com
>
>

Tom
Fri Jul 16 08:43:35 CDT 2004

"Paul" <pthakur@apsc.com> wrote in message
news:ePXdaPraEHA.212@TK2MSFTNGP12.phx.gbl...
> Thanks Tom.
>
> I am able to change the value in metabase using adsutil.vbs, however when
I
> create a new web site on the server using IIS manager, it still comes up
> with the dialog box with anonymous pre-checked (3rd dialog box where we
> specify the path). This is probably a value in the dialog box that needs
to
> be set to "unchecked". Any clue to where to fix this?

Are you just looking to make sure that any new site does not allow anonymous
by default? Just bring up the master property sheet for the server in the
MMC and change it (right click on the server name, not the web site).

--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsserver2003/community/centers/iis/
http://mvp.support.microsoft.com/
http://www.iisfaq.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://www.tryiis.com

Paul
Fri Jul 16 09:25:44 CDT 2004

I did set the Master properties at server level via IIS Manager (IIS 6.0) to
not use anonymous account (unchecked anonymous) that didn't help. I then
tried on an older server with IIS 5.0 same issue.


"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:cd8ld2$ct69@kcweb01.netnews.att.com...
> "Paul" <pthakur@apsc.com> wrote in message
> news:ePXdaPraEHA.212@TK2MSFTNGP12.phx.gbl...
> > Thanks Tom.
> >
> > I am able to change the value in metabase using adsutil.vbs, however
when
> I
> > create a new web site on the server using IIS manager, it still comes up
> > with the dialog box with anonymous pre-checked (3rd dialog box where we
> > specify the path). This is probably a value in the dialog box that
needs
> to
> > be set to "unchecked". Any clue to where to fix this?
>
> Are you just looking to make sure that any new site does not allow
anonymous
> by default? Just bring up the master property sheet for the server in the
> MMC and change it (right click on the server name, not the web site).
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsserver2003/community/centers/iis/
> http://mvp.support.microsoft.com/
> http://www.iisfaq.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running
IIS
> http://www.tryiis.com
>
>

John
Sat Jul 17 13:42:29 CDT 2004

On Thu, 15 Jul 2004 13:23:46 -0700, Tom Kaminski [MVP] wrote:
>=A0"Paul" <pthakur@apsc.com>=A0wrote in message
>=A0news:ujOy5GqaEHA.972@TK2MSFTNGP12.phx.gbl...
>>=A0I am developing a script to install and auto configure IIS 6.0. I
>>=A0would
>=A0like
>>=A0to set the IIS Directory Permissions via a command line script to
>>=A0just the "Integrated Windows Authentication". By default
>>=A0"Anonymous" is also
>>
>=A0checked.
>>=A0How do I uncheck "Anonymous" using a script?
>>
>
>=A0See
>=A0http://www.microsoft.com/resources/documentation/iis/6/all/proddocs/en
>=A0-us/ref_mb_authflags.mspx

See these:

Get and install the metabase. Then you will be able to SEE the the path the=
values and what to change them to.

http://www.serverautomationtools.com/webcgi/webbatch.exe?techsupt/tsleft.web=
+Microsoft-Scripting+Download-MetaEdit-2-2-utility.html

Then learn some ADSI scripting:

http://www.serverautomationtools.com/webcgi/webbatch.exe?techsupt/tsleft.web=
+Microsoft-Scripting+Microsoft-ADSI-Site.html

John Cesta

---------------------------------
The CPU Checker - Maximize Server Uptime
LogFileManager - The only IIS Logfile Management Tool
DomainReportIt PRO - Helps Convert IIS Installs
http://www.serverautomationtools.com