HOWTO: Troubleshoot IUSR_machine Permissions Problem

ID: Q188712

The information in this article applies to:

SUMMARY

The following information is meant to provide general guidelines for troubleshooting permissions problems with the anonymous account IUSR_machinename and Visual InterDev.

Many permissions problems are related to the IUSR_machinename account not having sufficient permissions to access a resource. The purpose of the troubleshooting steps below is to create a new anonymous account with sufficient permissions to access the resources in question; thereby, confirming that the inability of the anonymous account to access a resource is due to incorrect permissions settings.

When troubleshooting permissions issues related to the IUSR account, it is often necessary to reset both directory and file permissions, which can then be difficult to reset to their original configuration. By creating a new IUSR_Test account and setting it up as the anonymous account in both Internet Service Manager and NT User Manager, permissions settings for the anonymous account can be changed without affecting existing permissions; to reset permissions back to their original settings simply replace the IUSR_Test with the original IUSR_machinename account.


MORE INFORMATION

Context

Visual InterDev client working against a Windows NT Server (standalone local domain IIS_Box) hosting Internet Information Server (IIS); NT Server (standalone local domain SQL_Box) running SQL Server 6.5 (or shared directory with Access database); Primary Domain Controller (PDC domain name DomainName).

Troubleshooting Steps

  1. Create a new domain account on the PDC machine using the following domain account: IUSR_Test.


  2. Grant "logon locally" rights on both the IIS and SQL machine using the DomainName\IUSR_Test account.


  3. Start and stop IIS so setting will take affect and shut down the browser and restart it to assure there is no caching of permissions.


  4. Set up the new DomainName\IUSR_Test as the anonymous account in the Internet Service Manager.


  5. Test the new account by logging off the IIS machine and logging back on as IUSR_Test and trying to access the resource in question; such as the .mdb file or the SQL Server database.


  6. Ensure that the IUSR_Test account can access and run ASP pages.


Additional query words: 


Keywords          : kbNTOS400 kbVisID100 kbVisID600 kbGrpASP FTAuthent 
Version           : WINDOWS:1.0,6.0
Platform          : WINDOWS 
Issue type        : kbhowto

Last Reviewed: May 13, 1999