Hi, I set up WebDAV directory on Server 2003 without any problems using Basic
Authentication

http://voronov.co.uk/WebDAV
User Name: TEST
Password: 123456

When I type http://voronov.co.uk/WebDAV in Internet Explorer address bar I
prompted for password. Page dispayes after I enter correct user name and
password provided above. Account TEST has read only permissions.

Howeever when I go to File menu, Open..., check Open as Web Folder and enter
the same http://voronov.co.uk/WebDAV address I prompted for user name and
password again. No matter which account I try to enter including
Administrator, I wont let in. Why is that? I would like to copy files to my
Web Folder using another account with Write Permissions

Account TEST set up allow log on locally and access from network. I do not
experience this problem on IIS Server. Accounts auditing is enabled but no
any deny logs in there.

Re: WebDAV Web Folder by Egbert

Egbert
Tue Oct 19 04:43:32 CDT 2004

"Andy" <Andy@discussions.microsoft.com> wrote in message
news:553A20E0-AD8D-46F6-B78E-C64F4837BBFD@microsoft.com...
> Hi, I set up WebDAV directory on Server 2003 without any problems using
> Basic
> Authentication
>
> http://voronov.co.uk/WebDAV
> User Name: TEST
> Password: 123456

forgot to say: пÑ?ивеÑ?!


Re: WebDAV Web Folder by Andy

Andy
Tue Oct 19 07:09:03 CDT 2004

Ð?Ñ?ивеÑ?Ñ?!!!! I use Windows 2003 built in ICF with Web Server [HTTP] enabled.
How can i tell if HTTP 1.1 headers enabled? Just read thread below and added
'TEST' account to 'Log on as a batch job' Security Settings. Going back to
work and see if it help sort problem out. Glad will be able get help from
native speaker from Microsoft. I do scientific calculations and not
experienced in networking at all. Should I restart computer after making
changes to Local Security Settings? I cant restart my comp at the moment so
may be changes wont take effect.



"Egbert Nierop (MVP for IIS)" wrote:

> "Andy" <Andy@discussions.microsoft.com> wrote in message
> news:553A20E0-AD8D-46F6-B78E-C64F4837BBFD@microsoft.com...
> > Hi, I set up WebDAV directory on Server 2003 without any problems using
> > Basic
> > Authentication
> >
> > http://voronov.co.uk/WebDAV
> > User Name: TEST
> > Password: 123456
>
> forgot to say: пÑ?ивеÑ?!
>
>

Re: WebDAV Web Folder by Andy

Andy
Tue Oct 19 07:53:01 CDT 2004

Adding 'TEST' to 'Log on as a batch job' Security Settings did not help.
Tryied add 'http://voronov.co.uk/WebDAV' to my network place, asked for
password but even Administrator account rejected. I ran out of options! Why
can I open that folder in IE using any valid account?

I checked Event Log. Somebody tried open it using 'test' instead of 'TEST'
and that recorded. But there is nothing in Event Log when I opening throug My
Network Places.


Re: WebDAV Web Folder by me

me
Tue Oct 19 03:23:11 CDT 2004

I would check the IIS logs and HTTPerror logs
"Andy" <Andy@discussions.microsoft.com> wrote in message
news:845886F4-957A-4DD0-A635-025F89ED7DDC@microsoft.com...
> Adding 'TEST' to 'Log on as a batch job' Security Settings did not help.
> Tryied add 'http://voronov.co.uk/WebDAV' to my network place, asked for
> password but even Administrator account rejected. I ran out of options!
Why
> can I open that folder in IE using any valid account?
>
> I checked Event Log. Somebody tried open it using 'test' instead of 'TEST'
> and that recorded. But there is nothing in Event Log when I opening throug
My
> Network Places.
>



Re: WebDAV Web Folder by Egbert

Egbert
Tue Oct 19 12:50:00 CDT 2004

"Andy" <Andy@discussions.microsoft.com> wrote in message
news:845886F4-957A-4DD0-A635-025F89ED7DDC@microsoft.com...
> Adding 'TEST' to 'Log on as a batch job' Security Settings did not help.
> Tryied add 'http://voronov.co.uk/WebDAV' to my network place, asked for
> password but even Administrator account rejected. I ran out of options!
> Why
> can I open that folder in IE using any valid account?
>
> I checked Event Log. Somebody tried open it using 'test' instead of 'TEST'
> and that recorded. But there is nothing in Event Log when I opening throug
> My
> Network Places.


For webdav, you can't use IE. You need the webfolder view from Windows.

Second you can use filemon and tokenmon from sysinternals.com to see who and
what is denied. Since I could login perfectly, I really think that your
firewall or proxy disabled HTTP 1.1 extensions.


Re: WebDAV Web Folder by Andy

Andy
Tue Oct 19 14:27:02 CDT 2004

You CAN use webdav in IE! Just go to IE menu File, Open... there is "Open as
Web Folder" check box. CHECK it and type "http://voronov.co.uk/WebDAV" in
Open Text Box. Standard Log in dialog will be displayed. If I enter User
"TEST" Password "123456" on local computer I will be able not only see the
folder contents but also modify it using right click menu if supply
appropriate permissions.

Thanx for suggestion to check IIS WEb Log. Here is log when I open on local
computer:

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
2004-10-19 19:16:50 81.154.189.0 OPTIONS / - 80 - 81.154.189.0
Microsoft-WebDAV-MiniRedir/5.2.3790 200 0 0


Howeever If I Open Web Folder using Remote Computer, Log is completely
different:

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-10-19 15:55:22 81.154.189.0 GET /_vti_inf.html - 80 - 146.191.228.3
Mozilla/4.0+(compatible;+MS+FrontPage+6.0) 404 0 2
2004-10-19 15:55:22 81.154.189.0 POST /_vti_bin/shtml.dll/_vti_rpc - 80 -
146.191.228.3 MSFrontPage/6.0 404 0 3

It seems to logging stopped at shtml.dll and win32 status is not 0 but 3.
May be this information will give any clues? Will try sysinternals software
but thats not good suggestion case Microsoft should have their own tools for
troubleshoting such a simple problems

Regards,
Andy

Re: WebDAV Web Folder by Egbert

Egbert
Sun Oct 24 16:41:44 CDT 2004

"Andy" <Andy@discussions.microsoft.com> wrote in message
news:6C94DD42-A320-46A3-B7AB-3D831265DEAC@microsoft.com...
> You CAN use webdav in IE! Just go to IE menu File, Open... there is "Open
> as
> Web Folder" check box. CHECK it and type "http://voronov.co.uk/WebDAV" in
> Open Text Box. Standard Log in dialog will be displayed. If I enter User
> "TEST" Password "123456" on local computer I will be able not only see the
> folder contents but also modify it using right click menu if supply
> appropriate permissions.
>
> Thanx for suggestion to check IIS WEb Log. Here is log when I open on
> local
> computer:
>
> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
> Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
> 2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
> Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
> 2004-10-19 19:16:50 81.154.189.0 OPTIONS / - 80 - 81.154.189.0
> Microsoft-WebDAV-MiniRedir/5.2.3790 200 0 0
>
>
> Howeever If I Open Web Folder using Remote Computer, Log is completely
> different:
>
> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2004-10-19 15:55:22 81.154.189.0 GET /_vti_inf.html - 80 - 146.191.228.3
> Mozilla/4.0+(compatible;+MS+FrontPage+6.0) 404 0 2
> 2004-10-19 15:55:22 81.154.189.0 POST /_vti_bin/shtml.dll/_vti_rpc - 80 -
> 146.191.228.3 MSFrontPage/6.0 404 0 3
>
> It seems to logging stopped at shtml.dll and win32 status is not 0 but 3.

3 means 'not found'
(type net helpmsg 3 from the command prompt)

The remote client is trying to emulate webdav using frontpage. If you
install Frontpage 2002 (or 2000) extsions it would be solved.
(For IIS6 you need to enable frontpage extensions as well as for webdav)...



> May be this information will give any clues? Will try sysinternals
> software
> but thats not good suggestion case Microsoft should have their own tools
> for
> troubleshoting such a simple problems

Microsoft also suggests sometimes to use 3th party tools. The point is that
the NT kernel is non-disclosed but sysinternals found how to hook the
security layer.
see for instance
http://support.microsoft.com/?id=317423 (where they advise to use filemon!)

> Regards,
> Andy


Re: WebDAV Web Folder by Andy

Andy
Sun Oct 24 17:21:02 CDT 2004

Thank for help I already figured out that _vti_* dirs are used by front page
and I have FP XP installed on my work computer. It took me quite a long to
find out how to install FP Extensions. I found at Microsoft KB to use

owsadm -o install -u admaccount -sp publish

Utilitity ran without problems and installed all necessary _vti_* folders,
however when I go to Default Web Site | Server Extensions 2002 | Settings...
I got "You are not authorized to view this page". I dont care case I will
never use those extensions as long I will be able to access my Web Folder.
Will check and inform tomorow.

Forgot to ask how to prevent client computer launching my Web folder using
those nasty FP extensions without uninstalling Front Page? Just I will never
use FP extensions so whats the point to keep them just for possible security
risk.





"Egbert Nierop (MVP for IIS)" wrote:

> "Andy" <Andy@discussions.microsoft.com> wrote in message
> news:6C94DD42-A320-46A3-B7AB-3D831265DEAC@microsoft.com...
> > You CAN use webdav in IE! Just go to IE menu File, Open... there is "Open
> > as
> > Web Folder" check box. CHECK it and type "http://voronov.co.uk/WebDAV" in
> > Open Text Box. Standard Log in dialog will be displayed. If I enter User
> > "TEST" Password "123456" on local computer I will be able not only see the
> > folder contents but also modify it using right click menu if supply
> > appropriate permissions.
> >
> > Thanx for suggestion to check IIS WEb Log. Here is log when I open on
> > local
> > computer:
> >
> > #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> > cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> > 2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
> > Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
> > 2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
> > Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
> > 2004-10-19 19:16:50 81.154.189.0 OPTIONS / - 80 - 81.154.189.0
> > Microsoft-WebDAV-MiniRedir/5.2.3790 200 0 0
> >
> >
> > Howeever If I Open Web Folder using Remote Computer, Log is completely
> > different:
> >
> > #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> > cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> > 2004-10-19 15:55:22 81.154.189.0 GET /_vti_inf.html - 80 - 146.191.228.3
> > Mozilla/4.0+(compatible;+MS+FrontPage+6.0) 404 0 2
> > 2004-10-19 15:55:22 81.154.189.0 POST /_vti_bin/shtml.dll/_vti_rpc - 80 -
> > 146.191.228.3 MSFrontPage/6.0 404 0 3
> >
> > It seems to logging stopped at shtml.dll and win32 status is not 0 but 3.
>
> 3 means 'not found'
> (type net helpmsg 3 from the command prompt)
>
> The remote client is trying to emulate webdav using frontpage. If you
> install Frontpage 2002 (or 2000) extsions it would be solved.
> (For IIS6 you need to enable frontpage extensions as well as for webdav)...
>
>
>
> > May be this information will give any clues? Will try sysinternals
> > software
> > but thats not good suggestion case Microsoft should have their own tools
> > for
> > troubleshoting such a simple problems
>
> Microsoft also suggests sometimes to use 3th party tools. The point is that
> the NT kernel is non-disclosed but sysinternals found how to hook the
> security layer.
> see for instance
> http://support.microsoft.com/?id=317423 (where they advise to use filemon!)
>
> > Regards,
> > Andy
>
>

Re: WebDAV Web Folder by Andy

Andy
Tue Oct 26 12:49:12 CDT 2004

Found the next useful link

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/pub_dav_redirector.asp

1. uninstalled FP Extensions

owsadm -o fulluninstall -p 80

2. removed all HTTP Headers from Web Folder

3. restarted server

4. Result: My Win XP SP2 client still trying to load FP Extensions on my
server.

Microsoft might have idiot programmers who cant make such a common task as
accesss folder on server work properly without using FTP or any VPN or
Terminal Servers.

---

"Andy" wrote:

> Thank for help I already figured out that _vti_* dirs are used by front page
> and I have FP XP installed on my work computer. It took me quite a long to
> find out how to install FP Extensions. I found at Microsoft KB to use
>
> owsadm -o install -u admaccount -sp publish
>
> Utilitity ran without problems and installed all necessary _vti_* folders,
> however when I go to Default Web Site | Server Extensions 2002 | Settings...
> I got "You are not authorized to view this page". I dont care case I will
> never use those extensions as long I will be able to access my Web Folder.
> Will check and inform tomorow.
>
> Forgot to ask how to prevent client computer launching my Web folder using
> those nasty FP extensions without uninstalling Front Page? Just I will never
> use FP extensions so whats the point to keep them just for possible security
> risk.
>
>
>
>
>
> "Egbert Nierop (MVP for IIS)" wrote:
>
> > "Andy" <Andy@discussions.microsoft.com> wrote in message
> > news:6C94DD42-A320-46A3-B7AB-3D831265DEAC@microsoft.com...
> > > You CAN use webdav in IE! Just go to IE menu File, Open... there is "Open
> > > as
> > > Web Folder" check box. CHECK it and type "http://voronov.co.uk/WebDAV" in
> > > Open Text Box. Standard Log in dialog will be displayed. If I enter User
> > > "TEST" Password "123456" on local computer I will be able not only see the
> > > folder contents but also modify it using right click menu if supply
> > > appropriate permissions.
> > >
> > > Thanx for suggestion to check IIS WEb Log. Here is log when I open on
> > > local
> > > computer:
> > >
> > > #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> > > cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> > > 2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
> > > Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
> > > 2004-10-19 19:16:50 81.154.189.0 PROPFIND /WebDAV - 80 - 81.154.189.0
> > > Microsoft-WebDAV-MiniRedir/5.2.3790 401 2 64
> > > 2004-10-19 19:16:50 81.154.189.0 OPTIONS / - 80 - 81.154.189.0
> > > Microsoft-WebDAV-MiniRedir/5.2.3790 200 0 0
> > >
> > >
> > > Howeever If I Open Web Folder using Remote Computer, Log is completely
> > > different:
> > >
> > > #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> > > cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> > > 2004-10-19 15:55:22 81.154.189.0 GET /_vti_inf.html - 80 - 146.191.228.3
> > > Mozilla/4.0+(compatible;+MS+FrontPage+6.0) 404 0 2
> > > 2004-10-19 15:55:22 81.154.189.0 POST /_vti_bin/shtml.dll/_vti_rpc - 80 -
> > > 146.191.228.3 MSFrontPage/6.0 404 0 3
> > >
> > > It seems to logging stopped at shtml.dll and win32 status is not 0 but 3.
> >
> > 3 means 'not found'
> > (type net helpmsg 3 from the command prompt)
> >
> > The remote client is trying to emulate webdav using frontpage. If you
> > install Frontpage 2002 (or 2000) extsions it would be solved.
> > (For IIS6 you need to enable frontpage extensions as well as for webdav)...
> >
> >
> >
> > > May be this information will give any clues? Will try sysinternals
> > > software
> > > but thats not good suggestion case Microsoft should have their own tools
> > > for
> > > troubleshoting such a simple problems
> >
> > Microsoft also suggests sometimes to use 3th party tools. The point is that
> > the NT kernel is non-disclosed but sysinternals found how to hook the
> > security layer.
> > see for instance
> > http://support.microsoft.com/?id=317423 (where they advise to use filemon!)
> >
> > > Regards,
> > > Andy
> >
> >

Re: WebDAV Web Folder by Egbert

Egbert
Tue Dec 07 16:41:29 CST 2004

"Andy" <Andy@discussions.microsoft.com> wrote in message
news:2A0D5D39-BB68-4A07-BB97-2A999AA790E9@microsoft.com...
> Found the next useful link
>
> http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/pub_dav_redirector.asp
>
>
> Microsoft might have idiot programmers who cant make such a common task as
> accesss folder on server work properly without using FTP or any VPN or
> Terminal Servers.

local Webfolder...

22:19:54 127.0.0.1 OPTIONS / 200
22:19:54 127.0.0.1 OPTIONS /tabstrip 200
22:19:54 127.0.0.1 PROPFIND /tabstrip 207
22:19:54 127.0.0.1 PROPFIND /tabstrip 207
22:19:57 127.0.0.1 PROPFIND /tabstrip 207
22:19:58 127.0.0.1 PROPFIND /tabstrip 207
22:19:58 127.0.0.1 PROPFIND /tabstrip 207

remote folder (b.t.w. the logging on the remote server is extended in this
case)...
22:23:46 OPTIONS / - 443 - 192.168.0.24 HTTP/1.1
Microsoft+Data+Access+Internet+Publishing+Provider+Protocol+Discovery - 200
406 640
22:23:46 OPTIONS /tabstrip - 443 - 192.168.0.24 HTTP/1.1
Microsoft+Data+Access+Internet+Publishing+Provider+Protocol+Discovery - 200
438 15
22:24:37 PROPFIND /tabstrib- 443 - 192.168.0.24 HTTP/1.1
Microsoft+Data+Access+Internet+Publishing+Provider+DAV - 207 1009 15
22:24:39 PROPFIND /tabstrib- 443 - 192.168.0.24 HTTP/1.1
Microsoft+Data+Access+Internet+Publishing+Provider+DAV - 207 101304 1453



I suppose, that your remote server does not allow 1) http 1.1 extensions 2)
does not allow other verbs than GET/POST/HEAD in the latter case, the
webfolder WILL fall back to frontpage...

Regards,

ps: IIS6 is one of the better Microsoft products and made by very smart
programmers including HTTP.sys.

> ---
>
> "Andy" wrote:
>
>> Thank for help I already figured out that _vti_* dirs are used by front
>> page
>> and I have FP XP installed on my work computer. It took me quite a long
>> to
>> find out how to install FP Extensions. I found at Microsoft KB to use
>>
>> owsadm -o install -u admaccount -sp publish
>>
>> Utilitity ran without problems and installed all necessary _vti_*
>> folders,
>> however when I go to Default Web Site | Server Extensions 2002 |
>> Settings...
>> I got "You are not authorized to view this page". I dont care case I will
>> never use those extensions as long I will be able to access my Web
>> Folder.
>> Will check and inform tomorow.
>>
>> Forgot to ask how to prevent client computer launching my Web folder
>> using
>> those nasty FP extensions without uninstalling Front Page? Just I will
>> never
>> use FP extensions so whats the point to keep them just for possible
>> security
>> risk.
>>
>>
>>
>>


Re: WebDAV Web Folder by Egbert

Egbert
Wed Dec 08 01:03:08 CST 2004


"Egbert Nierop (MVP for IIS)" <egbert_nierop@nospam.invalid> wrote in
message news:%> Regards,
>
> ps: IIS6 is one of the better Microsoft products and made by very smart
> programmers including HTTP.sys.

typo: HTTP.sys is written by the kernel group but I mean that it is a very
smart driver :)