KB154135 - How To Control Hours of Web Site Availability

Article ID: 154135

Article Last Modified on 6/23/2005

Microsoft Internet Information Server 2.0
Microsoft Windows NT Server 4.0 Standard Edition

This article was previously published under Q154135

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SUMMARY

You can manage user access to Internet Information Server (IIS) servers by time of day. By default, all users (as anonymous guests) have accesses to IIS servers at all hours of the day. The available hours can be limited through the User Manager for Domains program on a domain controller.

MORE INFORMATION

To control accessibility to published web pages at any given hour for all users, following the steps below:

On a domain controller, start the User Manager for Domains.
Double-click the user IUSR_<computername>.

NOTE: This account controls all user access to IIS responses, including named users in the domain and administrators, unless anonymous logon is revoked then all IIS users must be domain users.
Click the Hours icon at the bottom of the user properties screen.
The Logon Hours grid presents all seven days of the week with hourly boxes Midnight to 11:59 P.M. The default is all hours allowed. To change the status of an hour or range of hours, click the selected hour and select a range of hours.
With the hour or range selected, click the Allow or Disallow button to change the status. Disallowed hours will cause a break in the hours of service line.

When correctly configured, an HTTP request will receive the following error message during the disallowed hours:

HTTP/1.0 500 Server Error (Logon failure: account logon time
restriction violation.)

To completely block IIS availability, disable the account in the User Properties dialog box for IUSR_<computername>.

When the account is disabled, an HTTP request will receive the following error:

HTTP/1.0 500 Server Error (Logon failure: account currently disabled.)

Keywords: kbenv kbhowto KB154135