Repost of Permissions to Subweb (in Text rather then HTML)

[Robert Cohen]

Hello All,

I have a subweb which I only want particular users in my organization to
view. I set those users as able to browse. I turned annonymous access off.
However, other users are able to view the subweb. What am I missing?

 

[Jack Brewster]

Robert,

From your description, this sounds like it's an Intranet site? If so, check
the file system permissions on the directory where your subweb is stored. I
usually do this through the operating system, not FrontPage's security
interface (I'm a server admin, it's what I'm used to!). I'm willing to bet
that the other users have priviliges on that directory, maybe as Domain
Users. If you're on a network where everyone logs in, then they are
automagically authenticated by the web server meaning they're not anonymous
so they can get in.

 

[Robert Cohen]

Yes it is an intranet site.

I checked file system permissions via \\servername\wwwroot\subweb as well as
on the physical drive of the server using c:\inetpub\wwwroot\subweb. Both
show permissions of the administrator, system and such. None show domain
users, everyone, etc.

The Front Page Server Extensions show in that subweb the members listed that
I wanted listed for that subweb and all have at least browser permissions.
I don't have a Everyone or Domain Users set to nothing though. Should I add
that or will that lock out the ones with higher permissions. Should I deny
access via the file system?

The wierd thing is when I initially set up the subweb, it worked fine. It
let in those they should and kept out the others.

I do have the main website site to IWA and have annoymous authentication
turned off.

--
Robert Cohen
A legend in his own mind
--

Robert,

From your description, this sounds like it's an Intranet site? If so, check
the file system permissions on the directory where your subweb is stored. I
usually do this through the operating system, not FrontPage's security
interface (I'm a server admin, it's what I'm used to!). I'm willing to bet
that the other users have priviliges on that directory, maybe as Domain
Users. If you're on a network where everyone logs in, then they are
automagically authenticated by the web server meaning they're not anonymous
so they can get in.

--
Jack Brewster - Microsoft FrontPage MVP

Hello All,

I have a subweb which I only want particular users in my

organization

 

[Jack Brewster]

You shouldn't have to deny access, but obviously something is overriding.

When you assigned browser permissions, did you do it per user, or for a
group? If you used groups, you may want to audit them and make sure of the
membership.

One of the benefits of not using FP to manage security is that it minimizes
the places to check/configure. I'd suggest turning off the setting within
FrontPage (set it back to "Inherit") and then explicitly _allow_ access to
the users/group via NTFS. There may be a better way that encompasses FP
settings, but I never use them so I'm not sure. I do know that the NTFS
method works well and it's easy to manage, at least for folks like us who
have access to the server.

--
Jack Brewster - Microsoft FrontPage MVP

Yes it is an intranet site.

I checked file system permissions via \\servername\wwwroot\subweb as well as
on the physical drive of the server using c:\inetpub\wwwroot\subweb. Both
show permissions of the administrator, system and such. None show domain
users, everyone, etc.

The Front Page Server Extensions show in that subweb the members listed that
I wanted listed for that subweb and all have at least browser permissions.
I don't have a Everyone or Domain Users set to nothing though. Should I add
that or will that lock out the ones with higher permissions. Should I deny
access via the file system?

The wierd thing is when I initially set up the subweb, it worked fine. It
let in those they should and kept out the others.

I do have the main website site to IWA and have annoymous authentication
turned off.

--
Robert Cohen
A legend in his own mind
--

Robert,

From your description, this sounds like it's an Intranet site? If so, check
the file system permissions on the directory where your subweb is

stored.