Announcement

Collapse
No announcement yet.

"Access this computer from the network" & IIS

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • "Access this computer from the network" & IIS

    I have a IIS running on Windows 2003 with a GPO.
    In the GPO "Access this computer from the network" if everyone is removed, "http SSL" service moves to disabled state which in turn stops www service. How can make IIS running without this privilege?

  • #2
    Re: "Access this computer from the network" & IIS

    You Cann't do that

    Microsoft explicitly states that this required user right.

    You can refer it from google by pasting this title as i have no right to put URL yet

    Description of default permissions and user rights for IIS 7.0, IIS 7.5, and IIS 8.0

    Comment


    • #3
      Re: "Access this computer from the network" & IIS

      Originally posted by avilt View Post
      I have a IIS running on Windows 2003 with a GPO.
      In the GPO "Access this computer from the network" if everyone is removed, "http SSL" service moves to disabled state which in turn stops www service. How can make IIS running without this privilege?
      Link from previous poster

      http://support.microsoft.com/kb/981949

      Required part

      Default Windows user rights assignments
      The table in this section lists the default Local Security policies together with the users, the groups, or the users and groups that are assigned to the policy when IIS 7.0, IIS 7.5 or IIS 8.0 is installed.
      Windows user rights that are assigned by local security policy
      Allowed permissions Users / groups
      Access this computer from the network Everyone
      Administrators
      Users
      Backup operators

      Adjust memory quotas for a process LOCAL SERVICE
      NETWORK SERVICE
      Administrators
      ApplicationPoolIdentity
      Allow log on locally Administrators
      Users
      Backup operators
      Bypass traverse checking Everyone
      LOCAL SERVICE
      NETWORK SERVICE
      Administrators
      Users
      Backup operators
      Generate security audit details ApplicationPoolIdentity
      Impersonate a client after authentication LOCAL SERVICE
      NETWORK SERVICE
      Administrators
      IIS_IUSRS
      SERVICE
      Log on as a batch job Administrators
      Backup operators
      Performance log users
      IIS_IUSRS
      Log on as a service ApplicationPoolIdentity
      Replace a process level token LOCAL SERVICE
      NETWORK SERVICE
      ApplicationPoolIdentity

      Comment

      Working...
      X