How to give NT AUTHORITY\IUSR access to shared folder content?

Question

I find something related, but not same thing.

http://stackoverflow.com/questions/1269706/the-error-login-failed-for-user-nt-authority-iusr-in-asp-net-and-sql-server-2

My issue is that the files are shared on the network, and I would like to debug from local IIS, I find that all static files seems to be access denied (401.3)

I have used the trace system, and find that the IIS is accessing the source using "NT AUTHORITY\IUSR"

Url http://localhost:8451/umbraco_client/panel/images/panel_boxhead_h2_bg.gif 
App Pool Debug451 
Authentication anonymous 
User from token NT AUTHORITY\IUSR 
Activity ID 

I have set the shared folder to be accessible to everyone, and changed the application pool's identity to domain administrator.

I have also tried to use 'Network Service' as identity and assign Domain\MachineName$ full access to the shared folder...

It looks to me that iis always using "NT AUTHORITY\IUSR" to access static resouce? If so, how can I give access on a shared folder to a local account? Or how can I force IIS to use some other identity?

Answer 1

Make sure you have enabled IIS to serve static content. I had this issue, too, and it drove me nuts until I figured that out.

In "Turn Windows Features on or off", go to "Internet Information Services > World Wide Web Services > Common HTTP Features > Static Content" (for Windows 7; you'll have to find the similar option in XP).

I don't know how much this will help, but also see Microsoft's documentation.

Answer 2

You can change the user from local system to whatever you like in the LogOn tab in the World Wide Web service in Services.msc.

EDIT I checked XP and server 2003. Perhaps you're running a more current OS. You can also change the log on at the AppPool Level on the Identity tab in iis 6 and later