IWAM & IUSR Question

[creeve2005]

I have an IWAM_User and IUSR_User that I can't get rid of. These two names were part of a previous Active Directory naming scheme. I have long since dcpromo'd this server and am using a different naming scheme - but these two objects keep reappearing - even when I delete them. I have checked every thing I can in AD Users and Computers, IIS, and all Group Policies and can not find where these two objects are being referenced.

Any help is appreciated.

This is Win2k Adv. Server with a single AD domain and IIS installed on one of the servers.

 

[enbw]

These accounts are used by the IIS for anonymous logins. So they are effectively some sort of system account.

I think I am right in saying that they are only used if anonymous logins are used in IIS. I wouldn't delete them even if anonymous logs are being used. Maybe, you disable them but it depends exactly what you are doing with IIS.

Hope this helps

 

[creeve2005]

The thing is, IIS is using the proper IWAM_User and IUSR_User - these other two just show up in AD Users and Computers. I delete them with no adverse affects. My web servers work fine. I just want to stop them from showing back up. Where would I look to find out where they are being referenced?

Thanks

 

[enbw]

Are there other servers running IIS in your domain?

You might see these accounts for every installation of IIS.

 

[creeve2005]

I have two domain contollers both running IIS, and both of them are using the proper IUSR and IWAM. Yep, I've been through all these steps and have searched up and down the domain to see where these are being referenced, but I have no clue where else to look. Maybe somewhere in Bill's warped sense of humor......