AnonymousPasswordSync

  • Article

The AnonymousPasswordSync property indicates whether IIS should handle the user password for anonymous users attempting to access resources. The following list details the behavior of this property:

  • If AnonymousPasswordSync is set to false, the administrator must manually set the AnonymousUserPass property to the anonymous user password; otherwise anonymous access will not function properly.

  • If AnonymousPasswordSync is set to true, the anonymous user password is set by IIS.

  • If AnonymousPasswordSync is set to true and the value of the metabase property AllowAnonymous is set to false, no users will be permitted to log on to the FTP server.

  • For anonymous password synchronization to work when the domain controller for the IIS server is running Microsoft ? Windows ? 2000, you must have sub-authentication enabled. For more information, see the "Sub-Authentication" section of Digest Authentication in the Help that comes with IIS Manager.

ms524624.alert_caution(en-us,VS.90).gifImportant Note:

Setting AnonymousPasswordSync on a server running IIS 6.0 has no effect unless you run your application under the System identity and enable sub-authentication. However, it is strongly recommended that you never run an application under the System identity because of the risk it poses to security. If your application contains a buffer-overrun, malicious users can do anything they want under the guise of the System identity. Also, sub-authentication is not enabled by default on a new installation of IIS 6.0. This new default behavior of IIS 6.0 might break old applications that use Anonymous authentication.

Schema Attributes

Attribute Name

Value

ADSI/WMI Data Type

BOOL

ABO Data Type

DWORD_METADATA

Schema Default

TRUE

Internal Default

Not specified.

Upper Bound

0

Lower Bound

Not specified

Internal ID

6022

Friendly ID

MD_ANONYMOUS_USE_SUBAUTH

Property Attributes

INHERIT

User Type

IIS_MD_UT_FILE

Configurable Locations

You can configure this property at the following locations in the IIS metabase.

Metabase Path

IIS Admin Object Type

/LM/W3SVC

IIsWebService

/LM/MSFTPSVC

IIsFtpService

/LM/W3SVC/n

IIsWebServer

/LM/MSFTPSVC/n

IIsFtpServer

/LM/W3SVC/n/ROOT/file_name

/LM/W3SVC/n/ROOT/virtual_directory_name/file_name

IIsWebFile

/LM/W3SVC/n/ROOT/physical_directory_name

/LM/W3SVC/n/virtual_directory_name/physical_directory_name

IIsWebDirectory

/LM/W3SVC/n/ROOT

/LM/W3SVC/n/ROOT/virtual_directory_name

IIsWebVirtualDir

/LM/NNTPSVC

IIsNntpService

/LM/NNTPSVC/n

IIsNntpServer

/LM/SMTPSVC

IIsSmtpService

/LM/SMTPSVC/n

IIsSmtpServer

Flags

There are no flags for this property.

Requirements

Client: Requires Windows XP Professional, Windows 2000 Professional, or Windows NT Workstation 4.0.

Server: Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0.

Product: IIS

See Also