Migrated site has no local IUSR account permissions

We've migrated the IIS 5.0 site successfully to the new W2K server, and
all the domain-level permissions work great. However, b/c the IUSR
account on the new the box does not automatically have read
permissions, and now accessing the site prompts for a login -- ARGH!

This is a large site, complex directory structure, and going in every
directory with individual permissions and setting this would be a huge
pain. Any suggestions as to how we could get this set this in an
automated-recursive fashion without blowing all the other permissions
would be great!

Thanks much,

Chuck W.

Ken
Sat Dec 11 18:06:21 CST 2004

Do you currently have each folder set to inherit permissions from its parent
folder (in addition to any custom permissions for that folder)? If so, just
add the IUSR to the root folder of the website.

Otherwise, you can script permission changes using xcalcs. You can use the
FSO or similar to get a list of folders.

Cheers
Ken

"ChuckWWW" <cwyatt@rcn.com> wrote in message
news:1102773659.377176.309760@z14g2000cwz.googlegroups.com...
> We've migrated the IIS 5.0 site successfully to the new W2K server, and
> all the domain-level permissions work great. However, b/c the IUSR
> account on the new the box does not automatically have read
> permissions, and now accessing the site prompts for a login -- ARGH!
>
> This is a large site, complex directory structure, and going in every
> directory with individual permissions and setting this would be a huge
> pain. Any suggestions as to how we could get this set this in an
> automated-recursive fashion without blowing all the other permissions
> would be great!
>
> Thanks much,
>
> Chuck W.
>

Kristofer
Sun Dec 12 11:37:38 CST 2004

Hello,

Did you copy the folders from the old server? It sounds like you did not
copy the permissions as well, and that is causing problems. Have I
understood the problem correctly?

There is a tool called XCopy that can do this. Maybe that is what you are
looking for?

"HOW TO: Copy a Folder to Another Folder and Retain its Permissions"
http://support.microsoft.com/?kbid=323007

--
Regards,
Kristofer Gafvert
http://www.ilopia.com


"ChuckWWW" <cwyatt@rcn.com> wrote in message
news:1102773659.377176.309760@z14g2000cwz.googlegroups.com...
> We've migrated the IIS 5.0 site successfully to the new W2K server, and
> all the domain-level permissions work great. However, b/c the IUSR
> account on the new the box does not automatically have read
> permissions, and now accessing the site prompts for a login -- ARGH!
>
> This is a large site, complex directory structure, and going in every
> directory with individual permissions and setting this would be a huge
> pain. Any suggestions as to how we could get this set this in an
> automated-recursive fashion without blowing all the other permissions
> would be great!
>
> Thanks much,
>
> Chuck W.
>

ChuckWWW
Wed Dec 29 10:54:31 CST 2004

I used Robocopy which gets all these. The problem is that the IUSR
account is a machine-specific local account that the web server needs
to be able to read/execute web pages within the site.

I've now used XCACLS and that solved this problem and created another.
Now FrontPage clients see a "Parameter is Incorrect" error. I believe
it relates to using the /G switch instead of the /P switch, as
addressed in this KB article:
http://support.microsoft.com/kb/q250318/
Chuck
~~~~~~~~~~~~~~~~~~~~~~~~