Click here to get back home

How to non-trusted users write files to specific location

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
How to non-trusted users write files to specific location chessexpert 12-15-2005
Posted by chessexpert on December 15, 2005, 3:42 pm
Please log in for more thread options
I wrote a vbscript that asks users for certain input, then writes the file to
a server. It works fine as long as the users are in the same domain. They can
go to http page and click the link; the script begins to run, but then gives
"Logon failure: unknown user name or bad password" at the part where a file
must be written. I do not want to force users outside of the main domain to
have to authenticate. I have opened up NTFS permissions; everyone full
control, anonymous internet account has modify rights, even tried setting
network to modify rights, but it still gives access denied. IIS settings are
working as they person can run the script.

Set fso = CreateObject("Scripting.FileSystemObject")
Set outputfile = fso.createTextFile("\server\path\user.txt")

I could not change the unc path for an HTTP path (did not work).

How can I set it up so that everyone who runs the script will have rights to
a specific location without having to type in account and password? Here is
the part of the vbscript that it stops on:

Posted by Roger Abell [MVP] on December 16, 2005, 3:52 am
Please log in for more thread options
If the script is being run by IIS then it is running in context of
one of the IIS i*_machine accounts if the browsing user is
anonymous to IIS. If IIS is on server outside of domain where
the UNC accessed share is then the IIS cannot authenticate to
that sharing server. If that is the case, you either must enable
guest and grant guest the needed share and ntfs permissions for
the share, or you need to allow anonymous (you seem to be
overlooking the allowed anonymous shares security policy in
group policy's security options section).

>I wrote a vbscript that asks users for certain input, then writes the file
>to
> a server. It works fine as long as the users are in the same domain. They
> can
> go to http page and click the link; the script begins to run, but then
> gives
> "Logon failure: unknown user name or bad password" at the part where a
> file
> must be written. I do not want to force users outside of the main domain
> to
> have to authenticate. I have opened up NTFS permissions; everyone full
> control, anonymous internet account has modify rights, even tried setting
> network to modify rights, but it still gives access denied. IIS settings
> are
> working as they person can run the script.
>
> Set fso = CreateObject("Scripting.FileSystemObject")
> Set outputfile = fso.createTextFile("\server\path\user.txt")
>
> I could not change the unc path for an HTTP path (did not work).
>
> How can I set it up so that everyone who runs the script will have rights
> to
> a specific location without having to type in account and password? Here
> is
> the part of the vbscript that it stops on:



Similar ThreadsPosted
Wny Does Windows Want Write Extended Attributes for Users? August 4, 2005, 1:31 am
EFS blocking users from accessing their encrypted files June 6, 2007, 10:33 am
Rights to allow non admin to close other users' files March 6, 2008, 6:18 am
Object Access failure shows up when users open their own files?? October 2, 2007, 11:33 am
Object Access failure shows up when users open their own files?? October 2, 2007, 11:51 am
Write Attributes and Write Extended Attributes October 31, 2005, 1:30 am
Location of VPN Server March 22, 2006, 5:06 am
"From This Location" not showing Domain August 21, 2006, 7:10 pm
Location of SFPCOPY.EXE Utility? May 6, 2007, 11:19 am
Specifying publication location in the certificate request October 8, 2005, 2:03 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap