Re: Problem with Windows 2003 Server Security Settings + ASP.NET Web App

From: Paul Ingles (paul@oobaloo-dot-co-dot-uk)
Date: 04/13/03


From: "Paul Ingles" <paul@oobaloo-dot-co-dot-uk>
Date: Sun, 13 Apr 2003 16:09:22 +0100


Thanks, I thought I'd tried adding a different account before and it hadn't
worked. Anyway, thanks again for the KB article link.

"Ramiro Calderon Romero" <rcrdev@hotmail.com> wrote in message
news:#IuWT3QADHA.1616@TK2MSFTNGP11.phx.gbl...
> Hi,
> There's a KB article relating to security issues when you run ASP.NET
> application in a Domain Controller at [1]
>
> Hope this Helps
>
>
> --
> [1] http://support.microsoft.com/default.aspx?scid=kb;en-us;315158
> ____________________
> Ramiro Calderon Romero
> rcrdev@hotmail.com
>
>
>
>
> "Paul Ingles" <paul@oobaloo-dot-co-dot-uk> wrote in message
> news:u3ivNLIADHA.2208@TK2MSFTNGP12.phx.gbl...
> > I've upgraded a server to use Windows 2003 Server, and have (tried) to
> > configure it as a domain controller. This is purely a test machine so
its
> > not actually managing anything larger than itself and my development
> > machine.
> >
> > Before I converted it to a domain controller I tested a few web
> applications
> > and a web service, both of which ran fine. However, if I now try and use
> > them I get the security error included below.
> >
> > I've been trying to find anything I can on this, and have found nothing.
> > What's more, I don't understand why it worked a while ago and not now.
> >
> > -------------------------------------------------------------------
> > Access to the path "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary
> > ASP.NET Files\riskclient\f9b11085\d1cef5aa" is denied.
> > Description: An unhandled exception occurred during the execution of the
> > current web request. Please review the stack trace for more information
> > about the error and where it originated in the code.
> >
> > Exception Details: System.UnauthorizedAccessException: Access to the
path
> > "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> > Files\riskclient\f9b11085\d1cef5aa" is denied.
> >
> > ASP.NET is not authorized to access the requested resource. Consider
> > granting access rights to the resource to the ASP.NET request identity.
> > ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5
> or
> > Network Service on IIS 6) that is used if the application is not
> > impersonating. If the application is impersonating via <identity
> > impersonate="true"/>, the identity will be the anonymous user (typically
> > IUSR_MACHINENAME) or the authenticated request user.
> >
> > To grant ASP.NET write access to a file, right-click the file in
Explorer,
> > choose "Properties" and select the Security tab. Click "Add" to add the
> > appropriate user or group. Highlight the ASP.NET account, and check the
> > boxes for the desired access.
> >
> > Source Error:
> >
> > An unhandled exception was generated during the execution of the current
> web
> > request. Information regarding the origin and location of the exception
> can
> > be identified using the exception stack trace below.
> >
> > Stack Trace:
> >
> > [UnauthorizedAccessException: Access to the path
> > "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> > Files\riskclient\f9b11085\d1cef5aa" is denied.]
> > System.IO.__Error.WinIOError(Int32 errorCode, String str) +393
> > System.IO.Directory.InternalCreateDirectory(String fullPath, String
> path)
> > +632
> > System.IO.Directory.CreateDirectory(String path) +195
> >
> System.Web.Compilation.PreservedAssemblyEntry.DoFirstTimeInit(HttpContext
> > context) +85
> >
> >
>
System.Web.Compilation.PreservedAssemblyEntry.EnsureFirstTimeInit(HttpContex
> > t context) +97
> >
> >
>
System.Web.Compilation.PreservedAssemblyEntry.GetPreservedAssemblyEntry(Http
> > Context context, String virtualPath, Boolean fApplicationFile) +29
> >
> System.Web.UI.TemplateParser.GetParserCacheItemFromPreservedCompilation()
> > +91
> > System.Web.UI.TemplateParser.GetParserCacheItemInternal(Boolean
> > fCreateIfNotFound) +148
> > System.Web.UI.TemplateParser.GetParserCacheItemWithNewConfigPath()
+125
> > System.Web.UI.TemplateParser.GetParserCacheItem() +88
> > System.Web.UI.ApplicationFileParser.GetCompiledApplicationType(String
> > inputFile, HttpContext context, ApplicationFileParser& parser) +171
> > System.Web.HttpApplicationFactory.CompileApplication(HttpContext
> context)
> > +43
> > System.Web.HttpApplicationFactory.Init(HttpContext context) +485
> > System.Web.HttpApplicationFactory.GetApplicationInstance(HttpContext
> > context) +170
> > System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
> +414
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.459 / Virus Database: 258 - Release Date: 2/26/2003
>
>



Relevant Pages

  • Re: .net user permissions in IIS
    ... The exception message has all the information you need to correct this ... You can right -click on the folder containing the resources where access is ... account, or add the needed account and grant it permission. ... the current web request. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Security Exception Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42
    ... by default the asp.net system account does not have network access, ... I am struggling with a website on a W2K3 server which has the actual ... Exception Details: System.Security.SecurityException: Request for the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: No rights to report server bin folder
    ... Did you grant the Machine\ASPNET account permissions to that folder? ... : Exception Details: System.UnauthorizedAccessException: Access to the path ... granting access rights to the resource to the ASP.NET request identity. ... : System.IO.Directory.GetDirectories(String path, String searchPattern) ...
    (microsoft.public.inetserver.iis.security)
  • Re: No rights to report server bin folder
    ... Run filemon from www.sysinternals.com and determine which account is being ... "Bob" wrote in message ... :>: current web request. ... :>: Exception Details: System.UnauthorizedAccessException: Access to the ...
    (microsoft.public.inetserver.iis.security)
  • Re: Sample Logon Script
    ... > Re-entered push account and here is some of the CCM.log ... > Submitted request successfully SMS_CLIENT_CONFIG_MANAGER ... > name "ZRWKSHYMAN", in queue "Processing". ... > ---> Trying each entry in the SMS Client Remote ...
    (microsoft.public.sms.admin)

Loading