Re: Access Denied - Network Service vs Local Service
From: mangia (mangia_at_discussions.microsoft.com)
Date: 09/23/04
- Previous message: Joseph E Shook [MVP - ADSI]: "Re: Hierarchy in user management"
- In reply to: Ken Schaefer: "Re: Access Denied - Network Service vs Local Service"
- Next in thread: Ken Schaefer: "Re: Access Denied - Network Service vs Local Service"
- Reply: Ken Schaefer: "Re: Access Denied - Network Service vs Local Service"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 23 Sep 2004 12:35:39 -0700
I have a Windows 2003 Sever that I have had running fine several .NET
websites for over a year now.
Two weeks ago I decided to change my anonymous FTP site access from
'granted' and denied' IP addresses to 'not anonymous’ and require username
password access. I created an ‘FTPGuest’ user account and gave it the file
permissions I
wanted. Tested the FTP site access and it works fine from within the LAN
and/or from outside the WAN.
However, now when I attempt to access my website I receive an IE webpage
that ONLY SAYS “Access is denied.”, and nothing else. I see no error or
information in the Event logs. I spent most of the afternoon playing with
Permissions, User Accounts and Directory Security settings, but nothing has
helped.
Chris
"Ken Schaefer" wrote:
> Well, it seems that Local Service has access to something that Network
> Service does not.
>
> What exactly are you getting an Access Denied on? What is the exact error
> message?
>
> Cheers
> Ken
>
> "mangia" <mangia@discussions.microsoft.com> wrote in message
> news:21556E9A-50EE-4816-BF8E-8FBCB0332123@microsoft.com...
> >I have been struggling with my ASP.NET (V1.1 sp1) websites getting an
> >'Access
> > Denied' message.
> >
> > I have track down the problem (I think) to the IIS Connection Pools. Most
> > MS Info suggests keeping the 'Identity' set as 'Network Service' to
> > provide
> > greater security.
> >
> > However, I have found that if I change the Identity to 'Local Service' my
> > websites now work! What am I missing? Why does setying connection pool
> > 'Identity' set as 'Network Service' cause an 'Access Denied' message?
> >
> > Thanks for your help!
>
>
>
- Previous message: Joseph E Shook [MVP - ADSI]: "Re: Hierarchy in user management"
- In reply to: Ken Schaefer: "Re: Access Denied - Network Service vs Local Service"
- Next in thread: Ken Schaefer: "Re: Access Denied - Network Service vs Local Service"
- Reply: Ken Schaefer: "Re: Access Denied - Network Service vs Local Service"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]