IIS - Localstart.asp not working - Asked By Cris P on 18-Sep-09 09:40 AM

Hi all,
i'm trying to get IIS working on my Windows XP sp2. I installed IIS correctly (i suppose) and registered it with aspnet_regiis, as i saw in several forum (i did it because i installed IIS after installed .Net framework, so i read that it must be registered with this utility).

I use anonymous access with user DomaniName\IUSR_MachineName, with all access rights except for write access.

I tested this setup and it works correctly with every html page, some helloworld asp and aspx pages, and also with a web service i created with VS2008 (i can test them with a browser).

The problem is when i try to "visit" http:\\localhost\localstart.asp o http:\\localhost\iisstart.asp pages: a form pop up asking for username and password! That's too strange, because i set for only anonymous access. Also the same behaviour if i use 127.0.0.1 instead of localhost.

I try also with user ASPNET, but nothing changes. I try reinstall IIS many times, but nothing changes.

Althought it isn't a critical problem, i must understand why it behave in this way, and how to correct it!!!

Have you any ideas???

The code in that page is likely trying to access something - Robbe Morris replied to Cris P on 18-Sep-09 10:20 AM

that requires higher priviledges.

You realize that your IIS instance is publicly visible to anyone on the internet if you are connected???

You sure you want to elevate your anonymous user account's priviledges with that in mind?

I have. - [)ia6l0 iii replied to Cris P on 18-Sep-09 10:23 AM

You seem have anonymous authentication set up for the iistart.asp page. you need to remove it.

In IIS, right-click on the iisstart.asp file, choose properties - security - remove the "anonymous access". restart IIS.

If that does not work, that means you do not have administrator priveleges. Repeat the above steps by logging in using an account that has administrator privileges.

Still not working - Cris P replied to [)ia6l0 iii on 18-Sep-09 11:23 AM

Hi,
i tried both of your hint, but either fails.

If I remove anonymous authentication, i'm allerted that noone can reach that page: in fact, tryng to load localstart.asp o iisstart.asp (without tick anonymous authentication in IIS manager) a form still pops up asking for username and password. It doesn't solve.

It is so strange, because i can use all asp, aspx, html pages and asmx web services... May be something with the specified file iisstart??? Isn'i it a IIS test page, is it?

What do you think about?

Thanks,
Cris

Not internet connected - Cris P replied to Robbe Morris on 18-Sep-09 11:28 AM

Hi,
thanks for you memo, but all i want to do is to test IIS in my XP machine. I can elevate the privileges because the pc isn't connected to the Net, but only to my home network.

So, with that in mind, do you have any hint to solve this problem?

Thanks,
Cris

PS: The iisstart.asp and localstart.asp files are IIS test pages, so they shouldn't contain any dangerous code...

Doesn't have to be dangerous - Robbe Morris replied to Cris P on 18-Sep-09 12:55 PM

Starting up IIS would access dlls that the anonymous user account may not have access to use. It goes far beyond just whether the file itself can be executed by a given user.

I continue not to understand - Cris P replied to Robbe Morris on 22-Sep-09 08:02 AM

I'm sorry Robbe,
but i continue not to understand. As i stated before, iissart.asp and localstart.asp are iis and asp testpage, so they must work without any special effort.
A low-knowledge (like i am in IIS) user should thest his iis installation just running one of this two pages...

So, why i can use all other kind of "page" (ASP, HTML, ASPX, ASMX) and not this two???
I obtain same behaviour with all other users (not only anonymous method) also!

It's boring me so much...