adsutil.vbs does not seem to work...

[Roger Twomey]

I went into the properties of IIS and set the anonymous account to my Domain
IUSR account and tested. It worked. (Hurray).

Then I used cscrip.exe adsutil.vbs set w3svc/wamusername IUSR_DOMAIN

I then used the get to confirm the change. It showed the change.

I then restarted IIS. The site I was testing with SHOULD NOT HAVE WORKED
because I did not reset the password. It did work. I then went to the
security logs and could see that IIS is still using IWAM_Web6, which by the
way, successfully logged on.

Why isn't adsutil working for me? Am I forgetting something??

[Ken Schaefer]

Is your value for WAMUserName being overriden at a lower level (perhaps at a
particular site/application level)? etc

Cheers
Ken

"Roger Twomey" <roge...@vnet.on.ca> wrote in message
news:uRNFj4J2...@tk2msftngp13.phx.gbl...
:I went into the properties of IIS and set the anonymous account to my

:
:
:

[Roger Twomey]

I know how to override the IUSR account on a per domain basis. How could
this be done with the IWAM account??

As far as I know the answer to your question is No.

I wouldn't know how to find the answer though.

"Ken Schaefer" <kenR...@THISadOpenStatic.com> wrote in message
news:uC0xo6Q2...@TK2MSFTNGP12.phx.gbl...

[Ken Schaefer]

Actually you bring up a good point.

Each out-of-process application is hosted inside a dllhost.exe instance. For
medium isolation (pooled), all applications are hosted in a single, shared,
dllhost.exe. For high isolation applications, they are each hosted in
individual dllhost.exe processes. The IWAM account is the default account
(configured in Component Services) for these dllhost.exe processes.

So, if you create multiple high-isolation websites or web applications, and
then open the Component Services MMC snapin, you'll see them listed under
the "My Computer" node. You can set the identities there (by
right-clicking -> properties -> identity tab). I assume that this then
updates the the IIS metabase as well (or perhaps IISAdmin reads this
information from COM+)

But you can have different dllhost.exe process identities...

Cheers
Ken

"Roger Twomey" <roge...@vnet.on.ca> wrote in message

news:eD0CbZk2...@TK2MSFTNGP12.phx.gbl...
:I know how to override the IUSR account on a per domain basis. How could

: > :
: > :
: >
: >
:
: