Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm not sure how, but something happened with the IUSR account on my server. I host OWA and a personal site on the server, and one fateful day, I did something stupid (I'm sure; I don't recall what though) and both sites stared asking for domain logins. OWA also was refusing to show any images on the page.

I did some searching and found out that it's a permission problem with the anonymous login account (IUSR_MACHINE). I changed that account to be an admin account (no other account would work) and it 'works' but I obviously don't want this to be the case.

I followed the instructions here: for resetting the IUSR account password, but after setting the anonymous login to that account in IIS, and restarting it, it produced no change.

share|improve this question
up vote 1 down vote accepted

I'd recommend creating a new user and assign as the anonymous user, and give it read and/or write permissions to disk. For better security each site should have a custom user anyway so it's good to start with the first site to manage your own users. If you do that, then the built-in IUSR_machinename account becomes non relevant and unused.

share|improve this answer

This should help:


Solid information about the IUSR account fyi:


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.