When you add a group in the
Permissions dialog box of a FrontPage Web that contains
the IIS Anonymous account, which is usually IUSR_
machinename (where
machinename is the name of your server), the following error
message occurs:
These groups--DOMAINNAME\groupname--contain the account used
by your web server to implement Anonymous Logons. Granting these groups
access will allow anyone to have this level of access anonymously.
When you click
OK in the message dialog, the group is no longer listed on
the
Groups tab in the
Permissions dialog box; however, when you reopen the
Permissions dialog box, the group that was apparently removed is still listed.
Additionally, if you check the ACLs on the files, the group is there as
well.
FrontPage attempts to prevent you from adding the IUSR_
machinename
anonymous account or any group that contains it to a FrontPage Web's
permissions. IUSR_
machinename is the account that IIS uses for
anonymous browsing. If IUSR_
machinename is listed with Administer,
Author, and Browse access, any person attempting to open your Web will
have these rights.
To resolve this problem, do not add any groups that contain the
IUSR_
machinename anonymous account with permissions to your Web.
When you reopen the
Permissions dialog box, and the group is still
listed, highlight the group and click the
Remove button.
Microsoft has confirmed this to be a problem in the FrontPage 2000 Server Extensions.