Setting up an Intranet

[TomGuy]

Hi all,

I'm trying to set up our corporate intranet but I've run into a bit of a problem. For some reason only users with administrative rights can access the site over the web. If I try to log in with a non-administrative username and PW, I get an error saying the page cannot be displayed after 3 unsuccessful attempts. Can anyone give me a link to a good site with step-by-step instructions on setting up an intranet on Windows 2000 Server? I've searched the Microsoft TechNet site but I can't find some clear and concise instructions on how to set it up from start to finish.

Any help is greatly appreciated.

Cheers,

Tom

 

[JoplinMo]

Try this URL. It looks like it should be what you need.

http://www.simongibson.com/intranet/iis5/

Skip Tarrant, MCSE
Choice Solutions of Joplin
Joplin, MO, USA

 

[TomGuy]

Thanks for the response. The tutorial worked great. However....

For some reason the site is accessible to anyone without the use of a password, i.e. anonymous access. I tried it from my home computer and I was able to access the site without having to enter my domain account info. I made sure that when I was setting it up I kept the "Allow anonymous access to this Web site" unchecked and I also double-checked it by right-clicking the newly created site in IIS selecting properties, going to the "Directory Security" tab, clicking the edit button for "Anonymous access and authentication control" and seeing that the Anonymous access check box was unchecked.

Is there something that I'm missing? I'm not sure why it's allowing anonymous access.

Thanks a lot for any help.

Cheers,

Tom

 

[JoplinMo]

TomGuy,

On the same tab of Directory Security where you unchecked "Enable anonymous access," the bottom half is titled "Authenticated access." Did you click on a checkmark for "Integrated Windows authentication?" You have to enable one of those authentication methods, too.

Skip Tarrant, MCSE
Choice Solutions of Joplin
Joplin, MO, USA

 

[TomGuy]

Yes, "Integrated Windows authentication" is checked. Does anything else need to be checked there?

Thanks again,

Tom

 

[JoplinMo]

Tom, have you stopped and started the web site since you changed the security settings? If not, do that and test it again. The changes don't take effect until the site is started up again.

Just trying to make sure all bases are touched.

Skip Tarrant, MCSE
Choice Solutions of Joplin
Joplin, MO, USA

 

[TomGuy]

If by that you mean, have I closed the website window down and reopened it, then yes.

What's strange is that it was working properly before I set the permissions on the folder. The only problem at that point was that only the people in the administrators group could access it. Other usernames and pw's would not work. Then I granted domain users access rights to that folder (and all child objects in the folder) and now it doesn't promp for account info....

Thanks for any other suggestions!

Cheers,

Tom

 

[Tezdread]

To restart IIS under Win2k you'll need to open IIS manager and select the your site and you should see Stop / Start & Restart buttons at the top of the window.

It sounds to me likes it's your NTFS permissions that you're having problems with and not IIS.

Do you have the everyone group setup for read only?

Tezdread
"With every solution comes a new problem"

 

[TomGuy]

Thanks for the response

Actually the everyone group was not set up at all on the folder. The only groups with access to the folder were the administrators group, the system group and the domain users group. I added the everyone group with the following permissions:
traverse folder/execute file
list folder/read data
read attributes
read extended attributes
read permissions
...but it doesn't seem to have had any effect.

Does the everyone group need to have other permissions?

Thanks,

Tom

 

[Tezdread]

as far as I'm aware that should be enough...Do you get a page can't be displayed error or unautorised access error?

Tezdread
"With every solution comes a new problem"

 

[TomGuy]

neither. I'm just not being prompted with a login, which is making it an anonymous site. I want an intranet site that prompts the user for a username and password.

 

[TomGuy]

I finally got it solved. It was the everyone group and the domain users group that had unrestricted access. I removed both of those groups and added a new group that I created of only users that I wanted to have access to the site and it worked. (just in case anyone comes across this post in a search....)

Tom