Upgrading workgroup Win2003 server to Domain Controller; IIS probl

I'm modifying an existing test lab workgroup computer so that it can become a
Domain Controller. IIS is already installed on this system. When I promote it
to a Domain Controller, with the security get messed up since the server is
no longer a workgroup server and now has domain accounts?
--
Sandy Wood
Orange County District Attorney

Sandy, IIS uses certain built-in local accounts for it's operations such as

Sandy,
IIS uses certain built-in local accounts for it's operations such as
network service, system or iusr_computername depending on which one you are
using ... Therefore, when you promote a member server to a DC... the concept
of built in accounts work no more... and that has an effect on IIS... I would
advice you to shift the dc role to probably another server in the test lab
...

--
Regards,
ma_khan
http://www.iisworkstation.com

Thanks for the information, this will help my test lab setup.

Thanks for the information, this will help my test lab setup. I think for my
purposes, I'll uninstall IIS and dcpromo first before reinstalling IIS again.
--
Sandy Wood
Orange County District Attorney

Upgrading workgroup Win2003 server to Domain Controller; IIS probl

me a
e it
is

Yes, you want to install IIS after DC Promotion because security
settings will get messed up on the DCPROMO and break IIS.

Typically, you do not want IIS (or any other servers) running on the
Domain Controller for security reasons.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

The advice to not use IIS on a DC is to be taken a bit stronger than just a

The advice to not use IIS on a DC is to be taken a bit stronger than just a
best practice. If you use IIS on a DC, then the anon user is a Domain account
and has rights by default as a member of domain users. This may or may not be
acceptable depending on your cirucmstances, but often is not.