SharonR
Thu Jan 05 16:28:03 CST 2006
Hello Dave,
I do not want an anonymous user to get to the website. I only want our
authenticated users to be able to use it. I guess that is where my confusion
is... Our users are logged onto the network, and the wss server is on the
network, so we are using active directory so they don't have to log in each
time they access the website. The server is not visible outside of our
system, so I think I should turn off anonymous access. But as I said
earlier, my system administrator said I absolutely should not do that.
Therein lies the problem.. my instructor said to turn it off if I use active
directory and my system administrator says not to...
Second wrinkle I just thought of... I have a second website that is not wss
on the same server, and is on a virtual server under IIS... If I turn
anonymous access off in IIS, then will I disable viewing on that second
website (again, this site should only be visible inside our network).
Since I am not very IIS literate, I am proceeding slowly on this one, and
trying to get a definitive answer.
Thanks for your comeback.
--
SharonR
"Dave Bone" wrote:
> I have Anonymous Access turned on for my WSS. By defualt the AA can view any
> new library or list. Then if I need to keep AA out I go to the library or
> list then Modify Settings and Columns > Change Permissions for This List >
> Change Anonymous Access and then remove all of the check marks. Then AA can
> no longer get to the item even though they can see any links. They always are
> asked for a log in.
>
> Make sure you are using a work station that is not logged into the Active
> Directory. I use a server sandbox where a log in as the local admin. That way
> you know the access is truly anonymous to WSS since it cannot access the
> server admin info.
>
> I think they suggest truning off AA where you always want or need to know
> who is accessing the WSS. We have work stations on the plant floor that do
> not use Active Directory accounts but need access to the WSS documents. SO we
> need AA turned on.
>
> Dave
>
> "SharonR" wrote:
>
> > I have done item B and C on my site (in particular on a Links webpart), and
> > still cannot limit the access. I am a little nervous about disabling
> > anonymous user because, even though I have taken complete backups, I have
> > never restored a wss site... and all my reading makes it sound tricky.
> > Thanks for your come backs. I will have to consider all your input before I
> > decide to proceed with disabling anonymous user... would prefer not to have
> > to do a restore at this time.
> > --
> > SharonR
> >
> >
> > "Engelbert" wrote:
> >
> > > I don't know whether it would solve your problems. Thinks might be different
> > > when it's once been set on and then switched off especially is anonymous has
> > > been set on the site in the meantime.
> > >
> > > So I don't know, but it's worth a try (after a backup) if the problems are
> > > annoying you.
> > >
> > > BUT.
> > >
> > > a) you can never limit access to a particular document (the lowest level of
> > > authentication is the document library
> > >
> > > b) you can limit access to a particular document library only by opening the
> > > document library; clicking Modify Settings and Columns and then Change
> > > Permissions - where you'll have to remove most of the site groups that are
> > > there and replace with particular users perhaps.
> > >
> > > If other people than those you've specified can still access the document
> > > library make sure they are not themselves Local Administrators on the server
> > > (or members of an AD Group that is).
> > >
> > > Engelbert
> > >
> > > "SharonR" <SharonR@discussions.microsoft.com> wrote in message
> > > news:4FC00BDB-A289-4706-B019-30044E9EC2F2@microsoft.com...
> > > > Thank you for the quick response. Just to clarify (for me), do you mean
> > > > that
> > > > I can turn anonymous access off, and then it would not be available in
> > > > WSS.
> > > > Do you think that would "fix" my rights permissions problems ie... I
> > > > cannot
> > > > seem to limit access to a particular library or document now, and would
> > > > like
> > > > to do so. Thanks
> > > >
> > > > SharonR
> > > >
> > > >
> > > > "Engelbert" wrote:
> > > >
> > > >> Anonymous access is only selectable in WSS if it's been specified in IIS
> > > >> (reference
> > > >>
http://www.asaris.de/sites/walsh/Lists/WSS%20FAQ/DispForm.aspx?ID=121)
> > > >> but I
> > > >> don't think you can then from this draw the conclusion that anonymous
> > > >> access
> > > >> can't be turned off in IIS for WSS to work.
> > > >>
> > > >> I.e. I don't think it matters to WSS (if you don't want to use anonymous
> > > >> access) whether IIS has anonymous on or off.
> > > >>
> > > >> Engelbert
> > > >>
> > > >>
> > > >> "SharonR" <SharonR@discussions.microsoft.com> wrote in message
> > > >> news:8E86265E-1EF3-4653-98C8-60C02D1B7CEA@microsoft.com...
> > > >> > Hello,
> > > >> >
> > > >> > I took a class before installing WSS and was told to disable anonymous
> > > >> > access. We are using Active Directory with our users. However, my
> > > >> > system
> > > >> > administrator tells me that I should not disable anonymous access in
> > > >> > IIS.
> > > >> > Which is correct? I seem to be having problems with my permissions
> > > >> > controls,
> > > >> > and am wondering if this could be the problem? Thank you
> > > >> > --
> > > >> > SharonR
> > > >>
> > > >>
> > > >>
> > >
> > >
> > >