Re: Access Denied - Network Service vs Local Service

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 09/27/04 

Date: Tue, 28 Sep 2004 07:26:06 +1000

If you are seeing nothing other than "Access is denied", then I don't think
you are seeing an error direct from IIS - do you have a proxy server in the
way that might be "interpreting" a message returned from IIS?

What do you see in the IIS Logfiles for the requests in question? Eg what is
the HTTP status and substatus?

Cheers
Ken

"mangia" <mangia@discussions.microsoft.com> wrote in message
news:A37CD2B9-245B-4219-A6B2-F5B77FD18A1A@microsoft.com...
>I have a Windows 2003 Sever that I have had running fine several .NET
> websites for over a year now.
>
> Two weeks ago I decided to change my anonymous FTP site access from
> 'granted' and denied' IP addresses to 'not anonymous' and require username
> password access. I created an 'FTPGuest' user account and gave it the
> file
> permissions I
> wanted. Tested the FTP site access and it works fine from within the LAN
> and/or from outside the WAN.
>
> However, now when I attempt to access my website I receive an IE webpage
> that ONLY SAYS "Access is denied.", and nothing else. I see no error or
> information in the Event logs. I spent most of the afternoon playing with
> Permissions, User Accounts and Directory Security settings, but nothing
> has
> helped.
>
> Chris
>
> "Ken Schaefer" wrote:
>
>> Well, it seems that Local Service has access to something that Network
>> Service does not.
>>
>> What exactly are you getting an Access Denied on? What is the exact error
>> message?
>>
>> Cheers
>> Ken
>>
>> "mangia" <mangia@discussions.microsoft.com> wrote in message
>> news:21556E9A-50EE-4816-BF8E-8FBCB0332123@microsoft.com...
>> >I have been struggling with my ASP.NET (V1.1 sp1) websites getting an
>> >'Access
>> > Denied' message.
>> >
>> > I have track down the problem (I think) to the IIS Connection Pools.
>> > Most
>> > MS Info suggests keeping the 'Identity' set as 'Network Service' to
>> > provide
>> > greater security.
>> >
>> > However, I have found that if I change the Identity to 'Local Service'
>> > my
>> > websites now work! What am I missing? Why does setying connection
>> > pool
>> > 'Identity' set as 'Network Service' cause an 'Access Denied' message?
>> >
>> > Thanks for your help!
>>
>>
>>

Relevant Pages

  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP control
    ... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
    (microsoft.public.win2000.security)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... > permissions that you must have to run Internet Information Services ... > third-party applications in an IIS 5.0 environment. ... Open the properties for the %systemroot%\Winnt folder, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Digest Authentication
    ... It sounds like IIS is having problems impersonating the IUSR account, ... In IIS, you do not need Script Source or Write permissions unless you ... But the Digest authentication for windows domain is ...
    (microsoft.public.inetserver.iis)