Secondary Domain Controller Issues

[jared_cal]

Hi everyone, this is my first time posting here, maybe someone can help me with a problem I am having...

I recently upgraded a windows 2000 server to be a secondary domain controller. It grabbed all the existing domain users from the primary DC fine.

However, the IUSR_BACKUP account (machine name is backup) was not being listed on the primary domain controller. It was listed under the secondary DC where it was originally a local account as:

IUSR_BACKUP
CNF:e4629b10-085c-4109-b114-09760596b051

I don't know why it had all that extra CNF junk listed after it. So, I deleted the account and re-created it on the primary domain controller. The secondary DC updated fine and now both domain controllers had IUSR_BACKUP listed.

However, now when I try to access a web site on the server, I am prompted for a domain user name and password. IUSR_BACKUP has full permissions on the web site directories, but I think by deleting the account and recreating it, I broke something.

Can anyone shed some light on this for me?

Thanks,
Jared

[rraehal]

I am sure you broke it. the IUSR account is created when you install IIS on the server.


removed previous comments

It seems you can reassign access by changing the IIS properties.

Go into computer management (Administrative tools) and find IIS under Services and Applications. Expand it so you can see the Default Web site.

You can right click and get the properties. Under the directory security tab you can allow anonymous access and then edit the account. Reassign the IUSR_BACKUP from you DC to be the anonymous access.
Allow IIS to control the password.