Re: WebControls error in an application running under an impersonate identity

From: Larry Hastings (greg.NOSPAM.@NOSPAM.unixsucks.com)
Date: 11/27/02 

From: "Larry Hastings" <greg.NOSPAM.@NOSPAM.unixsucks.com>
Date: Wed, 27 Nov 2002 09:35:03 -0600

I use System account for running aspnet_wp.exe (changed in machine.config)
which gives process broader permissions on local machine but enables you to
do cool stuff like authenticated as Machine account in SQL database, so
you'd need to store username and password anywhere in config files. Also
local system account is automatically part of local administrators group. 

--
G
http://www.unixsucks.com
"Alex Muntean" <munteana@ewc.co.jp> wrote in message
news:#JzU3AblCHA.1824@tkmsftngp04...
> I installed the latest Microsoft.Web.UI.WebControls and I successfully
built
> several test samples using the TreeView control. Then I tried to add the
> TreeView control to my own application which has to run under a domain
> account used for connection to the SQL Server, but when I access the page
> where the TreeView control resides I get the following error:
>
> "CS0009: Metadata file
>
'C:\WINDOWS\assembly\GAC\Microsoft.Web.UI.WebControls\1.0.2.226__31bf3856ad3
> 64e35\Microsoft.Web.UI.WebControls.dll' could not be opened -- 'Access is
> denied.'"
>
> I thought that the account the application is running under doesn't have
> enough rights in the %windir%/assembly folder. And because that folder is
a
> protected OS folder the only way to give it Read rights was using: "cacls
> %windir%\assembly /e /t /p Domain\UserName:R" This gave Read rights to
that
> user but I was getting the same error message.
>
> Eventually I made the user a member of the Administrators group but not
even
> that didn't solve the problem.
> Any suggestions will be greatly appreciated.
>
> From Web.config:
> <authentication mode="Windows" />
> <identity impersonate="true" userName="Domain\UserName" password="***" />
>
> Thank you,
> .a.
>
>

Relevant Pages

  • Re: windows services question
    ... about why it's enabled by default in the system account but not for ordinary ... users may have SeDebug privilege in the token. ... about the "LocalSystem" account in this regard. ... member of the Administrators group can easily enable SeDebugPrivilege if it ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Profile question...
    ... profile, but the option is grayed out. ... I then tried to copy contents of the doc & settings\user folder to doc ... doc & settings folder to only allow system & his local account access ... and the System account have access to the folder. ...
    (microsoft.public.windowsxp.general)
  • Re: Access is denied - GetEffectiveRightsFromAcl
    ... It happens to all folders/files. ... The DACL does have sySTEM account with full control. ... It looks like GetEffectiveRightsFromAcl at this case always requires a domain account. ... Since I want to make sure the folder has the full control of System account. ...
    (microsoft.public.platformsdk.security)
  • DirectoryServices error: Authentication mechanism is unknown: Solution
    ... passing username and password credentials, ... if you are running under a system account ... rather than an account that belongs to the domain you're connecting to. ... packet sniffing I was doing trying to find what happens when you bind. ...
    (microsoft.public.dotnet.general)
  • Re: File sharing problem with simple Windows XP Home Network
    ... account is a computer administrator and your children's are limited. ... child's account, share their folder. ... YOU shared it while logged in on your local machine. ...
    (microsoft.public.windowsxp.network_web)