old IUSR account in active directory

Tigger

Distinguished
May 2, 2004
14
0
18,510
Archived from groups: microsoft.public.win2000.active_directory (More info?)

There are two old user accounts:
1) IUSR_W2KSDNS (Built-in account for anonymous access to Internet
Information Services)
2) IWAM_W2KSDNS (Built-in account for anonymous access to Internet
Information Services out of process applications)

Currently, we don't have any system name "W2KSDNS".

So is it safe to delete these two accounts? How did these two accounts get
into active directory in the first place?
 
Archived from groups: microsoft.public.win2000.active_directory (More info?)

"Tigger" <Tigger@discussions.microsoft.com> wrote in message
news:726D59BB-C3E4-44E0-BE6D-27530A0FF1BA@microsoft.com...
> There are two old user accounts:
> 1) IUSR_W2KSDNS (Built-in account for anonymous access to Internet
> Information Services)
> 2) IWAM_W2KSDNS (Built-in account for anonymous access to Internet
> Information Services out of process applications)
>
> Currently, we don't have any system name "W2KSDNS".

Double check the IIS servers to make sure this was not
a CUSTOM name -- the automatic name would have been
created using the machine name, but a custom name could
have been anything.

> So is it safe to delete these two accounts? How did these two accounts
get
> into active directory in the first place?

Someone with AD Administrative privilege (or properly
delegated privilege) created them, probably by doing an
IIS install/configuration.
 
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Or they were running IIS on a DC...

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Herb Martin wrote:
> "Tigger" <Tigger@discussions.microsoft.com> wrote in message
> news:726D59BB-C3E4-44E0-BE6D-27530A0FF1BA@microsoft.com...
>
>>So is it safe to delete these two accounts? How did these two accounts
>
> get
>
>>into active directory in the first place?
>
>
> Someone with AD Administrative privilege (or properly
> delegated privilege) created them, probably by doing an
> IIS install/configuration.
>
>