webfolders permissions and IIs

[Tony]

This user I have cannot access the share through mapped drives. This is fine
because I have set the share permissions so that the user does not belong to
any groups that have access to the share. But, when the user go to network
places and try to add the folder or share as a webfolder, the user can
authenticate to it. get in and write to the share. Why is that?

IIs permissions on the webfolder only allows ALL write access or denies
everyone write access?

I need to web enable these mapped drives and shares so IIS is a must.

I am confused


Thanks

 

[Tom Kaminski [MVP]]

This user I have cannot access the share through mapped drives. This is fine
because I have set the share permissions so that the user does not belong to
any groups that have access to the share. But, when the user go to network
places and try to add the folder or share as a webfolder, the user can
authenticate to it. get in and write to the share. Why is that?

IIs permissions on the webfolder only allows ALL write access or denies
everyone write access?

I need to web enable these mapped drives and shares so IIS is a must.

I am confused

I'm confused. Are you talking about Mapped drives, UNC shares, or
webfolders?

 

[Tony]

well ok, the users log in to the domain and get mapped Q, R, S drives on a
server. I have set share permissions on these so that users with the right
access and "WRITE" to it and thats working fine.

But I also have IIs running on that server and have web enabled all these
drives. So I tried with one user that has no access to Q drive. The user go
to network places, adds a network place as a webfolder, it prompts for
authentication and the user logs in with domain\user, and boom, the user now
has rights to the share and can write to it via web folder.

does it make sense now?

Thanks

 

[Tom Kaminski [MVP]]

well ok, the users log in to the domain and get mapped Q, R, S drives on a
server. I have set share permissions on these so that users with the right
access and "WRITE" to it and thats working fine.

But I also have IIs running on that server and have web enabled all these
drives.

Specifically, what do you mean by that?

So I tried with one user that has no access to Q drive. The user go
to network places, adds a network place as a webfolder, it prompts for
authentication and the user logs in with domain\user, and boom, the user now
has rights to the share and can write to it via web folder.

does it make sense now?

It must mean that the user has at least NTFS Change permissions to the
folder.
IIS is completely independant of any UNC shares you might have setup.

 

[Jeff Cochran]

well ok, the users log in to the domain and get mapped Q, R, S drives on a
server. I have set share permissions on these so that users with the right
access and "WRITE" to it and thats working fine.

But I also have IIs running on that server and have web enabled all these
drives. So I tried with one user that has no access to Q drive. The user go
to network places, adds a network place as a webfolder, it prompts for
authentication and the user logs in with domain\user, and boom, the user now
has rights to the share and can write to it via web folder.

does it make sense now?

Better. That's a Windows share/folder/file permission issue though,
not an IIS one. Your problem may be that you're assuming the user is
the user account accessing the share, when it may be the anonymous
user account that is actually accessing the file. Turn off anonymous
authentication and use only Windows Integrated to check this.

Jeff

 

[Tony]

Yes! that was it. anonymous access was turned on. You good!!