OIWeb,NT-IIS,IUSR_computername rights (OpenInsight Specific)
At 15 FEB 2000 11:25:14AM Ken Massie wrote:
We are using the OIWeb on an NT4.0 IIS v.4 sp6a server. We ARE able to run the Inet_trace, but the only way to do this is to grant the IUSR_computername Administrative rights. Does anyone know of a way to do this without giving the IUSR_computername admin rights???
At 15 FEB 2000 12:03PM [url=http://www.sprezzatura.com]The Sprezzatura Group[/url] wrote:
IIS is an interesting beast in that it works differently than most other web servers. Mostly, this is because it has been very tightly integrated into the NT operating system.
One thing you should do is to follow the instructions in this KB article. It explains a registry setting to allow better interoperability.
We have found that whilst this helps with connections, it did not remove the administrator requirements. Our research found that IIS will not talk to OpenInsight unless the user has administrative rights. Microsoft will not allow a connection over the internet to communicate with any item outside itself. Since OpenInsight is running as a desktop process, Microsoft considers this a security violation and prohibits this. This also prevents using NT challenge/response options as all users must also have admin rights.
So far, we have not found any method around this and usually recommend using a different server.
World leaders in all things RevSoft
