I removed AD from my webserver (win 2k3 small bus edition) and now my web
sites say that I am not authorized to view the page (even from the web
server itself). I check IIS (6.0) and it definitly has allow anonymous
checked, I made sure that there is no integrated security checked, I also
opened up the permissions thru IIS and on the disk, but still no go. I even
gave the IUSR account admin rights, but still no go. And of course a wizard
that allows you to configure the server, was available before I removed AD
is now no longer available. The web sites worked fine until I removed AD.
I didn't install AD on this box, it came already setup from dell. I
successfully installed AD & DNS on another box, and now removal of it from
my webserver has caused my websites to not accept anonymous authentication.
Any idea why?
Thanks
gv

Can you be a bit more specific. What error are you geting in the browser
when you access the site. Are you getting any message in the event logs?

Regards
<gv> wrote in message news:uWm0rFnAEHA.2112@TK2MSFTNGP11.phx.gbl...

The error in the browser says
"You are not authorized to view this page"
"You do not have permission to view the directory or page using the
credentials that you supplied."

I checked the event logs and under Applications category a source from
IISADMIN has an error stating "IISADMIN service was unable to update the
activation identity of all IIS COM+ apps. Some IIS apps may fail to
function"
So I checked out component services and each component, and none require
security from the IUSR_ and IWAM_ accounts that I assume were part of the
domain.
Which specific logs were you thinking about?
I have a DNS log, and plenty of errors once I removed active diretory, but
once I disabled the DNS service, those events stopped .
It seems that the allow anonymous does not work. If I check off windows
authentication, then I can access the site when I authenticate.
I think something screwed up the IUSR account when I removed AD. Although I
did add new IUSR account and delete the old, but IIS still adds the old
account back to the system, but does not change the account set for
anonymous access.
Its wierd too, I just tried to log in using the IUSR accounts, but it won't
authenticate, but I use the administrator account, then I can log in and
view the web site like I should under anonymous access.


"news.microsoft.com" <anupam@email.com> wrote in message
news:eCdw2UnAEHA.2480@TK2MSFTNGP11.phx.gbl...