Access denied in internet facing site for xlsx files

Hello,
for xlsx files, the web site responds with access denied. I 've read the article http://support.microsoft.com/kb/2498047 but I don't understand what we should do in resolution <1>.
Just give read permission to this document library? to Whom? If I get to (web site) document library permissions/settings/anonymous user, it just has Add/Edit/Delete/View -  there isn't any read permission
It's an internet facing site, so our concern is security.
Thank you
Christos

Hi Christos,
Here's a good post on what you're looking to do in order to make step 1 of
http://support.microsoft.com/kb/2498047/en-us possible.
http://www.topsharepoint.com/enable-anonymous-access-in-sharepoint-2010
Once anonymous is enabled for the entire site, from within the permissions for the library, click on Stop inherting permissions, then click on anonymous access, off the ribbon, click anonymous access, then click view items, then click ok and allow to
view items, if that is all you want to allow.
Cheers
Stacy Anothersharepointblog.blogspot.com

Similar Messages

  • Issue with Internet facing site and Intranet sites

    Hello All,
    I have migrated the SP2013 environment using database attach method for our intranet site. We also working on the
    SP2013 Internet facing site using the same content database as Internet site.
    When I extended the web application for Internet facing site, zone to
    Internet and these are the URLs: The Intranet website URL is
    https://intranet.contoso.com/SitePages/home.aspx (Root Site) and
    SP2013 Internet facing site http://contoso.com (not a root site and publishing site template)
    However, I found on the http://contoso.com users can still access the
    http://contoso.com/SitePages/home with same content as Intranet.
    After done some Google search, bloggers mentioned to have move  https://intranet.contoso.com/SitePages/home.aspx to another site collection so that Internet facing site can exist root site.
    Can 2 we have to two root sites in same web application? I need the content database to be same so that managers can check
    Internet facing site and after signing into SP2013, redirects to
    Internet site.  
    Which is the best option to achieve this with same content database.   
    Please advice.
    Regards,
    Aroh 
    Aroh Shukla

    Business Requirement:
    Content Managers want to control internal Internet site (https://intranet.contoso.com) (with default zone, port 443, Root site) and also want to have SP2013 Internet site (with Internet zone
    http://www.contoso.com (not a root site and publishing site template)), Anonymous access at Web Application level. I configured the site architecture
    to have intranet zone as default zone and extended Web Application for Internet facing site with Anonymous site. This the current site architecture
    Because content managers do not want to duplicate public site (Internet facing site) with will be shared with some lists that are stored in intranet site.
    For e.g. a sub site named “News and Events” will be shared with Public site as well as Internet users. Therefore, if a manger wants to update a list in the public site, it should reflect in intranet site as well. Thus, managers
    don’t want to have separate database but same content database.
    Problem:
    I have extended web application to have different Internet zone, the site URL looks this: http://www.contoso.com/sites/public with publishing template and Anonymous access. Managers want to have public site URL to be just
    http://www.contoso.com and not   http://www.contoso.com/SitePages/Home.aspx. As I am using path based site collection for extending site collection, I am
    getting this URL http://www.contoso.com/SitePages/Home.aspx
    We also tried host named site collection, but it does not provide anonymous access and keep on asking for user credentials.
    Q1: We want to have Intranet and Public site with same content database as per business requirements, Shall I following link       http://sharepoint.stackexchange.com/questions/81172/moving-content-db-for-a-site-collection-to-another-db-server?
    Q2: Because I am constrained that I don’t want to have separate web application, (I know, its not regular requirement), how could achieve this requirements?
    Q3: Do have to completely re-design web site architecture, with
    www.contoso.com as main web application, then copy Intranet site collection and move this to
    www.contoso.com/intranet using
    Move-SPSite command 
    Any kind of pointer and help will be highly appreciated as I am struggling for 2 weeks to solve this.
    Regards,
    Aroh  
    Aroh Shukla

  • Move Internet facing site and remove Exchange site

    Background:
    I am running Exchange 2010 in native mode
    I have multiple AD sites connected via WAN
    I have two sites each with an Exchange CAS, HT, Mailbox server and internet connections
    I have one Edge server in the DMZ at the internet facing site A
    All mail currently flows in/out through site A via connectors
    OWA is currently hosted on the CAS/HT server at site A
    I have installed a new Edge server in the DMZ of site B and cloned the configuration.
    I am planning the move of the internet facing site to the new site where the other Exchange CAS/HT server resides.
    Once the mail flow is occurring correctly in/out site B, I need to move all mailboxes to site B and shut down the Exchange server at site A. 
    Questions:
    When I create the Edge Subscription at the new site, it offers to create a new send connector.  The CAS/HT server at site B already has a send connector to site A.  Will the new send connector cause mail flow problems if it is pointing to
    the new Edge server that is not yet updated on public DNS?  I am trying to do this in stages and I am not ready to change mail flow to site B internet.
    What needs to happen to move OWA to the Exchange server at site B?
    Once site B is handling OWA, all mail flow, and all mailboxes have been moved to that site, can I simply shut down the site A Exchange server?
    Thanks for any input on how best to plan this move.  If there is any documentation for this specific scenario, I work well from instructions but have not seen anything on the internet.

    1.  Sending can happen from both sites, regardless of where your MX records point.  In fact, you don't need an MX record to send email - just to receive.  So the new send connector in Site B won't cause issues with mail flow - messages will
    go out B and come in A until you rehome your MX record.
    2.  In order to move OWA to Site B, your external records for your OWA site need to point to the external IP address that will connect to the Site B CAS (and hopefully, you have it behind a firewall of some sort).
    3.  Not quite - you need to move your OAB generation to the new site, and make sure that all CAS virtual directories in the new site are configured to handle the connections that currently go to Site A.  See the following for what you need to do
    to decommission your Site A Exchange servers - but where it says "Exchange 2013", think "Site A Exchange servers": 
    http://technet.microsoft.com/en-us/library/ee332361(v=exchg.141).aspx

  • Create a public Internet facing site with SharePoint Foundation

    Hi,
    Would I be able to use SharePoint Foundation to create a public Internet facing site? In addition, where can I find tutorial on how to create public Internet facing sites?
    Thanks a lot!
    Eduardo

    Hi Eduardo,
    You can create public Internet facing site using SharePoint Foundation, e.g. www.wssdemo.com
    Regards,
    Vladimir
    MCTS, SharePoint tips blog: http://buyevich.blogspot.com

  • Exchange Server 2010 Mailflow between Internet Facing-Site and No Internet Facing-Site

    Hi all,
    My environment there are two sites, Internet Facing-Site and No Internet Facing-Site.
    The mail flow between them, it isn't working. The messages stuck in the queue.
    Default Receive Connector No internet facing-site is configured, bellow:
    Defaul....
    - Transport layer....
    -Basic Authentication...
    - Exchange Server Authentication.
    - Integrated windows....
    Configuration the Internet Facing-Site, bellow:
    From intenet
    - Transport layer....
    -Basic Authentication...
    - Integrated windows....
    And i configured a new receive connector on the Internet Facing-Site, follow bellow:
    Sites
    - Transport layer....
    -Basic Authentication...
    - Exchange Server Authentication.
    - Integrated windows....
    But, the messages yet stay stuck in the queue.
    Queue error:
    451 4.4.0 Primary target IP address responded with: “421 4.2.1 Unable to connect.” Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts.
    I'm needing help, pls.

    Please check SMTP traffic filtering/scanning enabled on the router/firewall. You can telnet even if the SMTP
    traffic filtering/scanning enabled on the router/firewall. But emails will not pass through if the configuration is incorrect.
    May be speed between sites causing this issue (not sure). Anyway please try changing the Tarpitinterval as a test.
    To see the current setting "Get-ReceiveConnector | Select name,tarpitinterval "To set new value "Set-ReceiveConnector “<Connector-Name>”
    –TarPitInterval:00:00:010"
    Try restarting "MSexchange-Transport-sevice" on both servers as well
    Can you send email one-way or
    both ways not working? 
    MAS

  • Shared folders (Windows file shares) show access denied and do not prompt for credentials

    Scenario:
    Like other admins, I log on and work as a 'standard user' (usera) with no admin rights anywhere in the domain, to perform admin tasks I have another account (userb) which I authenticate with as and when required. userb has been allocated/delegated permissions
    as required.
    Problem: 
    When trying to connect to shared folders on servers (2008 R2) using a UNC patch via Windows Explorer (Win 7 Ent.), I see an access denied error and do not get an option to supply alternative credentials.
    If I try to connect to the admin shares on the same server (\\server\C$ or \\server\e$) I get an access denied message AND get prompted for credentials. I supply my admin account and gain access as expected.
    If I check share and storage management when attempting to connect, I see that Windows is trying to connect me to each share as usera (which has no access). I understand why I get access denied at this point, but not why it can't just prompt me to supply an
    account that does have access. When trying the admin shares I also see the usera account, but I get a prompt to supply a user who does have access.
    Share permissions on the folders are for example 'Everyone' Full Control.  NTFS permissions are 'userb' has modify (read, execute, list, traverse etc) via a 'Server Admins' AD Universal security group.
    Note: If I do a NET USE from CMD and use the /USER switch, I can access the shares fine. But this is not great for accessing shared folders on the fly from various computers.
    How can I get the other shares on the server to prompt me, rather than just say access denied?
    Many thanks.

    Try to disable guest user from the server
    If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY
    suggestion in a test environment before implementing!

  • Sharepoint 2010 - Not able to access Sharepoint 2010 Public facing site on mobile browsers

    Hi All,
    Earlier, I posted a similar question in the forum , but did not get appropriate response . Posting it again with some more information .
    We are not able to access Sharepoint public facing site on Mobile browsers like chrome, IE, Safari (However the site is working fine on Firefox mobile browser and on PC/Laptops as well .)
    Following is the error we are getting :
     "Cannot set custom attribute on mobile controls in this page. Custom attributes specified are Access Key=0."
    I checked in the event logs , following was the exception :
    Exception captured in Exception HttpModule: System.Web.HttpException: Server cannot append header after HTTP headers have been sent.
       at System.Web.HttpResponse.set_RedirectLocation(String value)
       at Microsoft.SharePoint.Utilities.SPMobileUtility.Redirect(String url, SPRedirectFlags flags, HttpContext context, String queryStrings)
       at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.HandleMobilePageRequest(HttpContext context)
       at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.PostResolveRequestCacheHandler(Object oSender, EventArgs ea)
       at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
       at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    Also, there was a microsoft OS security  patching on our farm servers post which the error starts coming . Following were the patches that were installed
    1. MS14-005          
    KB2916036          Security Update for Windows Server 2008 R2 x64
    Edition (KB2916036)
    MS14-009          
    KB2898857          Security Update for Microsoft .NET Framework 3.5.1
    2. on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems
    (KB2898857)
    3. MS14-009          
    KB2901112          Security Update for Microsoft .NET Framework 3.5.1
    on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems
    (KB2901112)
    4. MS14-009          
    KB2911501          Security Update for Microsoft .NET Framework 3.5.1
    on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems
    (KB2911501)
    5. MS14-011          
    KB2909210          Security Update for Windows Server 2008 R2 x64
    Edition (KB2909210)
    6. MS14-012          
    KB2925418          Cumulative Security Update for Internet Explorer 8
    for Windows Server 2008 R2 x64 Edition (KB2925418)
    7. MS14-015          
    KB2930275          Security Update for Windows Server 2008 R2 x64
    Edition (KB2930275)
    8. MS14-016          
    KB2923392          Security Update for Windows Server 2008 R2 x64
    Edition (KB2923392)
    Has anyone of you ever faced similar(site not opening on mobile browsers) issue after installing these patches on farm servers .
    Any help would be much appreciated .
    Thanks
    Saquib Khan

    We have found below error related in ULS as well as event viewer both :
    Exception captured in Exception HttpModule: System.Web.HttpException: Server cannot append header after HTTP headers have been sent.   
     at System.Web.HttpResponse.set_RedirectLocation(String value)   
     at Microsoft.SharePoint.Utilities.SPMobileUtility.Redirect(String url, SPRedirectFlags flags, HttpContext context, String
    queryStrings)   
     at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.HandleMobilePageRequest(HttpContext context)   
     at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.PostResolveRequestCacheHandler(Object oSender, EventArgs ea)   
     at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()   
     at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    Saquib Khan

  • Access Denied Error Message in KM for the report published from BI

    Hi,
    Whenever we publish a Report from Bex Report Designer using Bex Broadcaster the report is getting published in the right KM Folder we choose, but when we click that link with in KM and choose Details we get a message saying "Access Denied". Due to this error that link is invisible in the actual iview where my KM folder is displayed.
    This Problem occurs only with Reports from Report Designer and not with Query from Query Designer and Web Templates from Web Application Designer.
    The user I use in BI and EP is the same. I am the owner of the KM folder and so I have full access to the folder.
    Is there any particular authorization required from BI side?
    Thanks
    Sathish

    This forum supports setup of the .NET Framework itself.
    For best suggestions on your web project configuration issue, I suggest you ask in a topical ASP.NET forum, here:
    http://forums.asp.net/
    This forum may be best:
    http://forums.asp.net/26.aspx/1?Configuration+and+Deployment
    Thank you for your understanding.

  • Access denied error in a popup for most of the clients.

    Hi all,
          i implemented the search help in a popup. its working well in some clients  and in some clients it's not .
        here clients means not different browsers different workstations.
        the problem is .
        from the popup i am setting the opener field value.
      the code is as follows.
        <b>parent.document.getElementById("XXXXX").value ="XY";</b>
       here i am getting the <b>Access denied</b> error on some clients and some clients the value is getting set.
        how could i overcome this problem,
    Regards,
    shiva.

    Hi
         i tried  how was it in the thread mentioned in the above reply, but not getting it .
      but what i noticed is
        if my server domain is like  <b>ABC.COM</b>  it's working .
        if the server  domain is like <b>ABC.XXX.COM</b>  then it's not working 
      Any suggestions will be appreciated.
    Regards
    shiva.

  • Access denied when jsp writes to a`network  file system

    Hi
    Can anyone help. Im having big problems with my web application which was working fine when it was hosted on a tomcat windows NT machine. The application was recently upgraded to a Windows 2000 machine. My jsp page which has to write to a network drive can no longer do so. I keep getting ACCESS DENIED.
    My jsp page is as follows:
    <html>
    <head><title>test</title></head>
    <body>This is a test page
    <jsp:useBean
    id="sendSMS"
    scope="page"
    class="podsystembeans.phonetrackbeans.FileWrite"
    />
    <%
    String sms = sendSMS.testIO();
    out.println(sms);
    %>
    </body></html>My javabean is as follows:
    package podsystembeans.phonetrackbeans;
    import java.io.*;
    public class FileWrite
         public String testIO(){
              try{
                       // Create file
                  FileWriter fstream = new FileWriter("R:/outt.txt");
                 BufferedWriter out = new BufferedWriter(fstream);
                  out.write("Hello Java");
                  //Close the output stream
                  out.close();
              }catch (Exception e){//Catch exception if any
                System.out.println("Error testing : " + e.getMessage());
         return "success";
    }OBSERVATION
    If i try and write the file to the local machine for example C and D drives then it works. If i try and write the file to R drive which is another windows 2000 machine then i get access denied. Also if i try and write to a L drive which is a windows NT machine then i get the same message too.
    If i run the above bean as a stand alone application with
    public static void main
    and I run it then it will work and write to any drive on the network.
    Everytime my application fails to write to the network drive my windows machine shows the mapped drives with a red cross on it. I have applied the latest service packs and i have followed microsofts suggestions editing the registry autodisconnect keys. But i am still having problems and it is my java app which is causing it.
    SETTINGS
    Windows 2000 service pack 4
    Tomcat 5 installed on d drive
    java 5 installed on c drive
    mapped network drives to other machines , the network is a 192.168.1.x network
    regards
    antek

    Hi
    Thanks for the pointer, I am trying to follow the suggestion and I want to know is the server.policy same as catalina.policy in tomcat under the conf folder. Also in this policy do i write the ip addresses of the machines i want to access?
    Thanks
    Antek

  • Access denied to resolve/close incidents for Incident Resolvers role

    I have a strange issue that I have found very limited information about.
    I have a group based on incident resolvers security group which worked fine up until i created queues and assigned just those queues to the group. Now users in this group are not able to resolve/close any incidents, as soon as i assign ALL queues to the
    group they are able to which long term is not suitable.
    One forum suggested this was due to processing time for the queues but its been over 24 hours and users are still not able to resolve/close their own incidents.

    Queues and groups use an database process to stamp work items with queue membership. this process only runs periodically, and is controlled by
    the Group Calc Polling interval. If you waited longer then this interval (which is mesured in miliseconds and defaults to about 30 seconds) then the group calc process has run, and the problem
    is not with unstamped work items. 
    Make sure your group and queue criteria selections are correct. as soon as you switch a role from all work items and assign a group or queue, then that role ONLY applies to items that match that queue criteria that have been stamped by the group calc process.
    If your selection criteria is bad, then no work items would be stamped, and the user would have no access. 

  • Access denied error when Loading document library for "contribute" users : Unknown SPRequest error occurred. More information: 0x80070005

    Hi,
    We are facing a very strange issue on a SharePoint Publishing portal. Domain users (contribute level access) have access to document libraries under specific sub sites. Every morning if they try to access the document library pages, users complain about "Access Denied" issue on document library page. But if a SP Farm admin account login on site, and browse to document library page, access denied issue seems to disappear for end users also. For whole day it works fine. But next day access denied error occurs again. I am not sure why this is happening. I have looked into Event Log and SharePoint Logs, found following information useful, but not sure what to do next.
    Please help.
    Event log Details:
    Server: WFE01
    Event Type: Error
    Event Source: Office SharePoint Server
    Event Category: Publishing
    Event ID: 5169
    Date:  17/11/2009
    Time:  07:47:31
    User:  N/A
    Computer: SPWFE01
    Description:
    Console Configuration File Error: XML Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    SP Log files:
    All logs are for process: w3wp.exe (0x031C)                        0x17F4 Windows SharePoint Services  
    ·     Begin OnLoad of XmlConsoleDataSource from file "EditingMenu".
    ·     Attempting to load XML from config file "EditingMenu".
    ·     PermissionMask check failed. asking for 0x00010000, have 0x00000000
    ·     Unknown SPRequest error occurred. More information: 0x80070005
    ·     Access Denied for /Projects/LFB/03 Bid Stage 1/Forms/AllItems.aspx.
    ·     StackTrace: Microsoft.SharePoint.Utilities.SPUtility:Void HandleAccessDenied(System.Exception), Microsoft.SharePoint.SPGlobal:Void HandleUnauthorizedAccessException(System.UnauthorizedAccessException), Microsoft.SharePoint.Library.SPRequest:Void OpenWeb(System.String, System.String ByRef, System.String ByRef, System.String ByRef, System.Guid ByRef, System.String ByRef, UInt32 ByRef, System.Guid ByRef, UInt32 ByRef, UInt32 ByRef, UInt32 ByRef, UInt16 ByRef, Boolean ByRef, Int16 ByRef, UInt32 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Boolean ByRef, Int16 ByRef, UInt32 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Int32 ByRef, Boolean ByRef, System.String ByRef, System.String ByRef, Int32 ByRef, Int16 ByRef, ...
    ...System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.Object ByRef, Boolean ByRef, UInt64 ByRef, Boolean ByRef, Boolean ByRef, System.Guid ByRef, System.Guid ByRef, Int32 ByRef, System.DateTime ByRef, System.DateTime ByRef, System.String ByRef), Microsoft.SharePoint.SPWeb:Void InitWeb(), Microsoft.SharePoint.SPWeb:Microsoft.SharePoint.SPSecurableObjectImpl get_SecurableObjectImpl(), Microsoft.SharePoint.SPWeb:Microsoft.SharePoint.SPRoleAssignmentCollection get_RoleAssignments(), Microsoft.SharePoint.Publishing.WebControls.ConsoleXmlUtilities:System.String ConfigurationXml(System.String, Boolean), Microsoft.SharePoint.Publishing.W...
    ...ebControls.ConsoleXmlUtilities:Microsoft.SharePoint.Publishing.WebControls.ConsoleNode GetConsoleNodeCollectionFromXmlFile(System.String, Boolean), Microsoft.SharePoint.Publishing.WebControls.XmlConsoleDataSource:Void LoadTreeFromConfigXml(), Microsoft.SharePoint.Publishing.WebControls.XmlConsoleDataSource:Void OnLoad(System.EventArgs), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Page:Vo...
    ...id ProcessRequestMain(Boolean, Boolean), System.Web.UI.Page:Void ProcessRequest(Boolean, Boolean), System.Web.UI.Page:Void ProcessRequest(), System.Web.UI.Page:Void ProcessRequestWithNoAssert(System.Web.HttpContext), System.Web.UI.Page:Void ProcessRequest(System.Web.HttpContext), System.Web.HttpApplication+CallHandlerExecutionStep:Void System.Web.HttpApplication.IExecutionStep.Execute(), System.Web.HttpApplication:System.Exception ExecuteStep(IExecutionStep, Boolean ByRef), System.Web.HttpApplication+ApplicationStepManager:Void ResumeSteps(System.Exception), System.Web.HttpApplication:System.IAsyncResult System.Web.IHttpAsyncHandler.BeginProcessRequest(System.Web.HttpContext, System.AsyncCallback, System.Object), System.Web.HttpRuntime:Void ProcessRequestInternal(System.Web.HttpWorkerReque...
    ...st), System.Web.HttpRuntime:Void ProcessRequestNoDemand(System.Web.HttpWorkerRequest), System.Web.Hosting.ISAPIRuntime:Int32 ProcessRequest(IntPtr, Int32),
    ·     Releasing SPRequest with allocation Id {E3BC24ED-F243-4DBD-8625-EE7CF9FDA039}
    ·     Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    ·     Console Configuration File Error: XML Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    ·     Releasing SPRequest with allocation Id {D1A87724-6FB6-4009-B6D1-D7E15918E213}
    Pryank Rohilla
    MCTS, MCAD

    Hi pryank,
    From the log, it seems that the users don’t have permission on this page:
    /Projects/LFB/03 Bid Stage 1/Forms/AllItems.aspx
    Does the sub site have unique permission instead of inheriting permission from the parent site? If no, you need to make the sub site to inherit permission from the site collection so that master page also inherits the right. If this is not allowed in your organization, please go to “Site Actions”à “Site Settings” à “Master Pages and Page Layouts” to give users permissions on this document library.
    Hope this helps.
    Lu Zou

  • MP in DMZ for Internet facing clients and MAC systems

    I am planning to install an MP, DP and SUP in our DMZ to be able to manage following
     - Internet facing clients
     - In house MAC system
     - All Mobile device
    I was wondering what ports I would be needing to open in DMZ so communication in/out DMZ to corporate is not compromised?
    Also, would single box be able to handle all of the above role or I would need additional Primary site insdie the DMZ considering DMZ is residing in different forest?
    I understand PKI is necessary to accomplish this so I am looking into it as well.
    Anyone done this before and had any issues so please share so I can take advantage of your experience.
    Thank you for your respond.

    You need to put a single box in the DMZ that has the enrollment point, SUP, MP, DP roles on it.  Remember that internet facing site box doesn't have to be domain joined.
    for ports you need to be able to push SQL, 445, 135, 8530 (WSUS), ports into the DMZ.  If the DMZ isn't able to have the ability to push into the perimeter network then you need to click the box that says "site server initated" this will make the primary
    on the inside reach into the DMZ ever hour and pull out status messages and other data left that can't come back into the company.
    Port listing
    http://technet.microsoft.com/en-us/library/hh427328.aspx
    Internet based is pretty much the same as it was in 2007 so you can use the docs for further information like scenerios:
    http://technet.microsoft.com/en-us/library/bb693824.aspx
    you will need to have the ability to export the cert and move it to the DMZ or you close the walls on the outside, make the make on the inside of the network, get the certs then bring up the firewall that forces it into the DMZ. 
    It is a bit more complicated than that but it is not easy to outline this proceedure in a single post. 
    http://www.sccm-tools.com http://sms-hints-tricks.blogspot.com

  • SharePoint 2013 public facing site doesn't not allow to view lists

    All,
    I have couple of questions regarding Sp2013 internet facing site. I am using Windows Azure environment with my own AD, DNS, WFE and of course SQL. please visit http://sharepointpath.com to see what i am trying to achieve. 
    My questions are as below:
    1) I am unable to access any of the lists for blog and team sites, when I click on any of the links it prompts for authentication. Web application is allowed anonymous access with "Entire site" not just lists and libraries.
    2) blog site and team site doesn't inhering master page from parent. I have changed master page setting to inherit on all sub sites, but doesn't appears to be working as expected.
    3) I am unable to access site using "www" CNAMe www.sharepoinpath.com
    Any help on this would be much appreciated.
    Thanks
    Pramod
    SP.UK | MCTS (Microsoft Office SharePoint Server 2007)

    In addition to allowing the anonymous authentication method for the web application you also need to set the anonymous policy and enable anonymous access in the site.
    Cloudshare has a good write-up about this. See How to Enable Anonymous Access to a SharePoint 2013 Site!
    Jason Warren
    Habanero Consulting Group
    habaneroconsulting.com/Insights
    @jaspnwarren

  • I can't connect my iPhone 5 to my windows 7, when I try to update the drivers it says access denied, help?

    I can't seem to connect my iPhone 5 to windows 7, it shows up under unspecified in the control panel but when I try to update the drivers it says access denied! Been at this for 3 days now! Tried numerous fixes, any help please?

    The iPhone 5 and iOS 6 require iTunes 10.7. Depending on what OS you have for your comptuer, could restrict you.
    Windows System Requirements
    PC with a 1GHz Intel or AMD processor and 512MB of RAM
    Windows XP Service Pack 2 or later, 32-bit editions of Windows Vista or Windows 7
    64-bit editions of Windows Vista or Windows 7 require the iTunes 64-bit installer
    250MB of available disk space
    Broadband Internet connection to use the iTunes Store
    Macintosh System Requirements
    Mac computer with an Intel Core processor and 512MB of RAM
    OS X version 10.6.8 or later
    Safari 4.0.3 or later
    400MB of available disk space 
    Broadband Internet connection to use the iTunes Store

Maybe you are looking for