Microsoft KB Archive/324320

= HOW TO: Use a FrontPage Web Site on a Clustered File Share =

Article ID: 324320

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft FrontPage 2002 Service Pack 2
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 3
 * Microsoft Internet Information Services 6.0
 * Microsoft Internet Information Services 5.0

-



This article was previously published under Q324320



IN THIS TASK
SUMMARY
 * Permissions to Enable Kerberos for Network Names
 * Enable Kerberos Authentication with the Cluster Administrator Tool
 * Use the Command Line to Enable Kerberos Authentication



SUMMARY
This article describes the configuration that you must use when you host a FrontPage Web site on a clustered file share. You must follow these steps because FrontPage uses the Internet Information Services (IIS) Web server's request user identity (such as the anonymous user account) to create files and folders. FrontPage uses the local computer system account (that is,  ) to do administrative tasks on the file system. Because this scenario only works in an environment with Kerberos authentication, you must enable Kerberos authentication either through one of the cluster administration tools (Cluadmin.exe or Cluster.exe).

NOTE: If you are using Windows 2000, you must be using Service Pack 3.

back to the top

Permissions to Enable Kerberos for Network Names
For additional information about the permissions that you must have to enable Kerberos for Network Names, click the following article numbers to view the articles in the Microsoft Knowledge Base:

302389 Description of the Properties of the Cluster Network Name Resource in Windows Server 2003

307532 How to Troubleshoot the Cluster Service Account When It Modifies Computer Objects

NOTE: The Cluster Service account must be able to create computer objects in Active Directory. By default, all users can create a default limit of 10 computer objects.

NOTE: The network name resource must be offline before you enable Kerberos support.

back to the top

Enable Kerberos Authentication with the Cluster Administrator Tool
NOTE: this procedure only works on Microsoft Windows Server 2003. With the Microsoft Windows 2000 version of Cluadmin.exe, you cannot enable Kerberos support. The next section, which describes how to enable Kerberos support by using the command line, works for Windows 2000.
 * 1) Open Administrative Tools.
 * 2) Click Cluster Administrator.
 * 3) Select the cluster that you want to configure.
 * 4) Select Resources, and then locate the Network Name resource that you want.
 * 5) Take that resource offline.NOTE: All resources that depend on this Network Name resource are also brought offline.


 * 1) Right-click the Network Name resource, click Properties, and then click the Parameters tab.
 * 2) Click to select the Enable Kerberos Authentication check box, click OK, and then bring the resource back online.

back to the top

Use the Command Line to Enable Kerberos Authentication
You can also enable Kerberos authentication from the command line:  Open a command prompt. Type the following, and then press ENTER:

cluster res &quot; &quot; /priv RequireKerberos=1

NOTE: &quot; &quot; is the name of the resource. You may have to enclose the resource name in quotation marks, as follows:

cluster res &quot;Cluster Name&quot; /priv RequireKerberos=1

For help, run the following command:

cluster /?



back to the top

Additional query words: iis 5.0 6.0 fp2002 kbappsvc

Keywords: kbhowto kbhowtomaster KB324320

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.