Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've been noticing that on one of our development servers that the Authentication settings has been mysteriously been changing from Anonymous to Windows Authentication and the "Execute Permissions" has been changing from Scripts Only to None without anyone admitting it and having only a small number of people who have the access to do it.

Short of intentional sabotage, which I doubt, has anyone ever seen anything like this?

Could it be the automated application of a group policy?

share|improve this question

IIS Doesn't change settings. People do.

share|improve this answer
When I run into situations like this with IIS, it is typically people who are changing a setting at the server/site level, and propagating it down to other sites/vdirs without realizing it. – MattB Sep 3 '09 at 21:24
That happens all too often over here as well. Either that or someone will make a change and someone else will revert it because they were not aware of the change that was made. My suggestion has been to keep a list of every configuration change that is made to IIS,DNS,SQL,etc servers in a specific place (a wiki or something) so everyone knows what the settings are supposed to be. – dubRun Sep 4 '09 at 0:46

Whenever I've had this happen (in general, not just with IIS) someone's changing it and not fessing up.

These settings can also change via direct editing of the IIS metabase. Do you have that enabled in IIS?

share|improve this answer

Is it an Exchange server?

Exchange has an internal process that configures its web components (OWA, etc.) as it sees fit to, and routinely overwrites whatever change you make directly to IIS.

share|improve this answer
No, it's not, but nice answer. – Chadworthington Sep 5 '09 at 23:28

having the same problem here!

I think it's IIS on 2000 or IIS 5 thing. It's driving me nutz. We have 7 load balanced servers that should contain all the same settings. sometimes it's just one server sometimes it's all of them. custom headers & cache-control is one issue and I have just notice anaonymous & windows authentication getting set oddly too.

I need a batch program that will clober the settings the way they need set and have it run daily. is this posssible???

share|improve this answer
You'd probably get better answers by asking that as a question (assuming that you don't find another question that matches yours). – Evan Anderson Jul 15 '10 at 14:40
We proved to ourselves that when the developers use Visual Studio 6 (from the '70s, I think) to modify ASP code on the development web server, that the settings on the Virtual folder get changed as a result. – Chadworthington Jul 16 '10 at 4:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.