Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We had a Sharepoint site running on a server which was a domain controller and everything was working fine (IIS6), everyone could login using windows authentication. We've since added a new domain controller and demoted the IIS server to be a member server. Since then external users arent able to access the sharepoint site. The username/password prompt appears but it keeps re-appearing when credentials are entered. On the IIS server there are logs that show access denied (unknown username/password) against the connection attempt.

I think IIS is still trying to authenticate those users itself (rather than passing on on the request to the new domain controller).

Does anyone have any ideas how we could resolve this??

Thank you!

share|improve this question

Well, typically when you have an IIS server on a DC there are all sorts of stuff that goes wrong:

What I would look at is that the IUSR account is infact the correct one, and not the domain one - you actually might not have an IUSR account since it would have been domain specific.

This link has some information regarding IIS on DC's, and this link talks about promoting a member server to a DC. Here are details on the IUSR and IWAM accounts, which will probably have to be recreated and re-linked in the metabase.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.