IIS 6.0: TO HOW: IIS ???? ??????? ?? ????????? ???? ?? ??? ???????? ????

?? ??? ?? ??? ???? ????? ???? ?? ?? ??? ??????? ?????????? ???????? (IIS) 6.0 sub-authentication ?? ???????? ???? ?????

???????? ??? ??, IIS, ?? ????? ????????? ??? ???? ???? ?? ??? ??????? ?? ????????? ???? ?? ??? IIS ???? ?? ??? ?????? ????? ?? ?? ?? ???? ??? ???? ?? ??? ???? ??????? ????? ????? ?? ??? ????? ????? ??, ?? ???? ???? IIS ??????? ????? ??? ??? ??????? ???? ???? ??? ???? ?? ?????????? ?? ???? ??? ?? ???? ???? ?? ??????????? sub-authentication ???, Iissuba.dll ?? ?????? ?? ?????? ???? ???

???????? ??? ??, IIS 6.0 ????? ???? sub-authentication ??????? ??? ??????? ????? involves ??? ?? ????? ?? ??? ??? IIS 6.0 ??? ???? ????? ?? ??????? ?? ????? ?????????? ?????? ?????? ???????? ???? ?? ??? ?? sub-authentication ?? ????? ?? ???? ???:

• ????????? ???? ????? ???? ??, ?? ??? ????? ????????? LocalSystem ?? ??? ??? ????? ??????
  
  ???:?? ?????? ?? ??????? sub-authentication ??????? ?????? ??? ???? ???????? ???? ?? ??? IIS ?? ??????? ?? ??? ????????? ?????? ???? ??? ???????? ??? ??, ??? ???????? ?? ????? ????????? ?? ?? ????? ????????? ????? ???? ?? ?????? ??? ????? ???? ???????, ??????? ?????? ??????? ???? ??, ?? ????? ?? ?? ???? ?????? ?? ???????? ???? ???? ??????? ?? ??????? ?? ?? ?? ???? (?? ?????? ???, ?????? ?? IUSR ????) ?????? ?? ???? ?? ???? ?? ????????? ?? ??? ??? ???? ???? ???
  
  ???? ??????? ?? ??? ????? ?? ???? ??? impersonated ?????????? ?? ??? ????????? ??? ????? ??, ?????? ?? ???????? ?????? ?????????? ?? ????? ?? ??? ????? Microsoft ??? ???? ?? ????:
  ????????? ??? ????? ???????? ????
  HTTP://www.Microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/f05a7c2b-36b0-4b6e-ac7c-662700081f25.mspx (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/f05a7c2b-36b0-4b6e-ac7c-662700081f25.mspx)
  LocalSystem ?? ?? privileged ??? ???? ??? When you enable sub-authentication, administering a Web server by using anonymous users may be much easier, but you must consider the potential security risk before you do this.
• The sub-authentication component, Iissuba.dll, must be registered.
• TheAnonymousPasswordSyncmetabase property must be enabled (that is, set to TRUE).

???:For more information about sub-authentication in IIS 6.0, visit the following Microsoft Web site:Note that the documentation incorrectly refers to theAnonymousPasswordSyncmetabase property as theAnonymousPasswordSynchmetabase property.

IIS 6.0 ??? sub-authentication ?? ???????? ???? ?? ??? ?? ???? ??? ?????? ??? ??????? ??? ?? ???? IIS ??????? ?? ??? ??????? ???? ?? ??? ?????

IIS 6.0 ?? ?? ??? ??????? ?? Sub-Authentication ???????? ????

???????:??? ?? ??????? ??? ??? ?? ??????? ???, ?? ??????? ?? ????? ???? ?? ?? ???? ?????? ?? ???????????? ???? ?? ??? ???? ??? ???? ?? ????? ?????? ?? ???? ?? ???? ???? Microsoft ?? ?????? ???? ?? ?? ??? ?? ??? ??????? ?????? ?????? ???????? ?? ?? ???? ?? ?? ???? ???? ??????? ?? ???? ????? ?? ??????? ?????

???:????? ?? ??? ?? ??? ??????? ??????? ???? ?? ?????

IIS 6.0 ?? ?? ???? ???? ??? ???????? ???? ????? ??????? ?? ?? ????? ????????? isolation ??? ??? ?? ??? ?? ?? ??? ??????? ?? sub-authentication ???????? ????:

1. Register Iissuba.dll. To do this, type the following at a command prompt, whereSystemrootis the system root directory (on a default installation, this is C:\Windows):
   rundll32Systemroot\system32\iissuba.dll,RegisterIISSUBA
2. Run all worker processes that use Anonymous authentication under the identity of LocalSystem.
   
   ???:IIS 6.0 permits you to group applications in application pools. Identities are configured for the application pool that your application is assigned to. If your applications use Anonymous authentication and are assigned to more than one application pool, you must repeat the following steps for each of these application pools. Information about application pools is included in the product documentation. To view the documentation, visit the following Microsoft Web site:
   ??????? ????? ??????
   HTTP://www.Microsoft.com/WindowsServer2003/IIS/default.mspx (http://www.microsoft.com/WindowsServer2003/iis/default.mspx)
   To configure an application pool to run under the LocalSystem identity:
   1. In the IIS Manager (ISM), expandlocal computer, ??????? ????Application Pools, right-click the application pool that you want to configure, and then click???.
   2. ????? ???????????? ?? ????? ????..
   3. ????? ????,Predefined, and in the list box next to it, clickLocal System.
   4. ????? ????,OK.
3. ??? ????AnonymousPasswordSyncmetabase property to TRUE:
   1. At the command prompt, change to the IIS AdminScripts folder. By default, this folder is located at C:\Inetpub\AdminScripts.
   2. ????? ???? ?????, ?? ??? ENTER ?????::
      adsutil.vbs set W3svc/AnonymousPasswordSync true

Configure Sub-Authentication on IIS 6.0 in IIS 5.0 Isolation Mode

To configure sub-authentication on a new installation of or upgrade to IIS 6.0 when IIS is running in IIS 5.0 isolation mode:

1. Register Iissuba.dll. To do this, type the following at a command prompt, whereSystemrootis the system root directory (on a default installation, this is C:\Windows):
   rundll32Systemroot\system32\iissuba.dll,RegisterIISSUBA
2. ??? ????AnonymousPasswordSyncmetabase property to TRUE:
   1. At the command prompt, change to the IIS AdminScripts folder. By default, this folder is located at C:\Inetpub\AdminScripts.
   2. ????? ???? ?????, ?? ??? ENTER ?????::
      adsutil.vbs set W3svc/AnonymousPasswordSync true

Configure Sub-Authentication on an IIS 6.0 Upgrade in Worker Process Isolation Mode

To configure sub-authentication on an upgrade to IIS 6.0 that is running in worker process isolation mode:

1. Register Iissuba.dll. To do this, type the following at a command prompt, whereSystemrootis the system root directory (on a default installation, this is C:\Winnt):
   rundll32Systemroot\system32\iissuba.dll,RegisterIISSUBA
2. Run all worker processes that use Anonymous authentication under the identity of LocalSystem.
   
   ???:IIS 6.0 permits you to group applications in application pools. Identities are configured for the application pool that your application is assigned to. If your applications use Anonymous authentication and are assigned to more than one application pool, you must repeat the following steps for each of these application pools. Information about application pools is included in the product documentation. To view the documentation, visit the following Microsoft Web site:
   ??????? ????? ??????
   HTTP://www.Microsoft.com/WindowsServer2003/IIS/default.mspx (http://www.microsoft.com/WindowsServer2003/iis/default.mspx)
   To configure an application pool to run under the LocalSystem identity:
   1. In the IIS Manager (ISM), expandlocal computer, ??????? ????Application Pools, right-click the application pool that you want to configure, and then click???.
   2. ????? ???????????? ?? ????? ????..
   3. ????? ????,Predefined, and in the list box next to it, clickLocal System.
   4. ????? ????,OK.
3. ??? ????AnonymousPasswordSyncmetabase property to TRUE:
   1. ????? ????????? ?? ????????? ???? ?? ??? IIS AdminScripts ???????? ???????? ??? ??, ?? ?????? ?? C:\Inetpub\AdminScripts ?? ????? ???
   2. ????? ???? ?????, ?? ??? ENTER ?????::
      adsutil.vbs W3svc/AnonymousPasswordSync ??? ??? ????

Sub-authentication ?? ???? ??? ???????? ??????? ?? ??? Microsoft ???????? ??? ???? ????? ?? ??? ????? ???? ?????? ?? ????? ????: