Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

HOW TO: Use a FrontPage Web Site on a Clustered File Share


View products that this article applies to.

This article was previously published under Q324320

↑ Back to the top


Summary

This article describes the configuration that you must use when you host a FrontPage Web site on a clustered file share. You must follow these steps because FrontPage uses the Internet Information Services (IIS) Web server's request user identity (such as the anonymous user account) to create files and folders. FrontPage uses the local computer system account (that is, machinename$) to do administrative tasks on the file system. Because this scenario only works in an environment with Kerberos authentication, you must enable Kerberos authentication either through one of the cluster administration tools (Cluadmin.exe or Cluster.exe).

NOTE: If you are using Windows 2000, you must be using Service Pack 3.

Permissions to Enable Kerberos for Network Names

For additional information about the permissions that you must have to enable Kerberos for Network Names, click the following article numbers to view the articles in the Microsoft Knowledge Base:
302389� Description of the Properties of the Cluster Network Name Resource in Windows Server 2003
307532� How to Troubleshoot the Cluster Service Account When It Modifies Computer Objects
NOTE: The Cluster Service account must be able to create computer objects in Active Directory. By default, all users can create a default limit of 10 computer objects.

NOTE: The network name resource must be offline before you enable Kerberos support.

Enable Kerberos Authentication with the Cluster Administrator Tool

NOTE: this procedure only works on Microsoft Windows Server 2003. With the Microsoft Windows 2000 version of Cluadmin.exe, you cannot enable Kerberos support. The next section, which describes how to enable Kerberos support by using the command line, works for Windows 2000.
  1. Open Administrative Tools.
  2. Click Cluster Administrator.
  3. Select the cluster that you want to configure.
  4. Select Resources, and then locate the Network Name resource that you want.
  5. Take that resource offline.NOTE: All resources that depend on this Network Name resource are also brought offline.

  6. Right-click the Network Name resource, click Properties, and then click the Parameters tab.
  7. Click to select the Enable Kerberos Authentication check box, click OK, and then bring the resource back online.

Use the Command Line to Enable Kerberos Authentication

You can also enable Kerberos authentication from the command line:
  1. Open a command prompt.
  2. Type the following, and then press ENTER:
    cluster res "res name" /priv RequireKerberos=1
    NOTE: "res name" is the name of the resource. You may have to enclose the resource name in quotation marks, as follows:
    cluster res "Cluster Name" /priv RequireKerberos=1
    For help, run the following command:
    cluster /?

↑ Back to the top


Keywords: KB324320, kbhowtomaster, kbhowto

↑ Back to the top

Article Info
Article ID : 324320
Revision : 10
Created on : 12/3/2007
Published on : 12/3/2007
Exists online : False
Views : 430