Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a website which access a network path for images including logos on the website. There is a virtual directory pointing to this network shared folder and I gave anonymous access to this virtual directory. This is to make sure that logos and images are available in login page, register page.

Webserver is running windows 2008 R2 IIS 7.5 Fileserver is running windows 2008 R2 Both are on same domain network

I use IUSR as anonymous user identity, and this works fine in UAT environment. Unfortunately not working on production environment. While troubleshooting I grant Everyone full access to network shared folder, still no luck. The images are not loading for anonymous users.

Could anyone shed some light on this?

share|improve this question

1 Answer 1

What is the app pool running as? Assuming it's the default of AppPoolIdentity, the worker process should be authenticating across the network as the machine's domain account (i.e. MACHINENAME$)

Assuming that your sharing and NTFS permissions are set up to allow access from this account, then you may find that actually the worker process is trying to authenticate as NT AUTHORITY\ANONYMOUS

I've come across this very issue on production systems (and it would appear, so have others). The AppPool would randomly stop authenticating as the domain computer and start trying to authenticate anonymously, and only a reboot of the server would fix it. In the end, we changed our AppPools to run under the NetworkService account and they have been stable ever since.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.