Re: NT AUTHORITY\Network Service can't write to .NET Directory?



Hi,

a) you should not run productive applications on domain controllers
b) thats how ASP.NET works - pages are compiled to classes, these classes go into assemblies and these assemblies have to be stored somewhere. ASP.NET is using this directory. I remember that there are some issues with asp.net on DCs, and one of them was (depending on the install order) - that the setup does not correctly ACL the temp directory. So you have to do that manually.

HTH
-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

Hi Dominick,

Um... do what, exactly? I have no idea what it's doing. I've never
seen that error before, and I've not written any code to access the
.NET directories.

What/why is it trying to do!?

"Dominick Baier" wrote:

Well - you really shouldn't do that...and it is also not necessary.

This directory is used by ASP.NET to temporarily store the compiled
pages. The worker process account needs modify privileges on that
IIRC..

-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)

Hi

An addition to my IWA query really - the sysadmin had promoted the
web server to a domain controller, and it *seems* to be letting us
into the Intranet app, but it's throwing the following error...

I wonder if some could explain what it's trying to do, and how to
fix it?

Ta, Dan.

Server Error in '/' Application.
________________________________________
The current identity (NT AUTHORITY\NETWORK SERVICE) does not have
write
access to 'C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary
ASP.NET
Files'.
Description: An unhandled exception occurred during the execution of
the
current web request. Please review the stack trace for more
information about
the error and where it originated in the code.
Exception Details: System.Web.HttpException: The current identity
(NT
AUTHORITY\NETWORK SERVICE) does not have write access to
'C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET
Files'.
Source Error: An unhandled exception was generated during the
execution of the current web request. Information regarding the
origin and location of the exception can be identified using the
exception stack trace below.

Stack Trace:

[HttpException (0x80004005): The current identity (NT
AUTHORITY\NETWORK
SERVICE) does not have write access to
'C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET
Files'.]
System.Web.HttpRuntime.SetUpCodegenDirectory(CompilationSection
compilationSection) +3482379
System.Web.HttpRuntime.HostingInit(HostingEnvironmentFlags
hostingFlags)
+226
[HttpException (0x80004005): The current identity (NT
AUTHORITY\NETWORK
SERVICE) does not have write access to
'C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET
Files'.]
System.Web.HttpRuntime.FirstRequestInit(HttpContext context)
+3435007
System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context)
+88
System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
+252


.



Relevant Pages

  • Re: NT AUTHORITYNetwork Service cant write to .NET Directory?
    ... Dominick Baier ... Developing More Secure Microsoft ASP.NET 2.0 Applications ... Exception Details: System.Web.HttpException: The current identity ... compilationSection) +3482379 ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Sharepoint 2.0 causing problems with .NET applications?
    ... I'm having trouble getting our .NET applications to run on IIS web ... thought important was that the Sharepoint site had Sharepoint's ISAPI ... Exception Details: System.Security.SecurityException: Security error. ...
    (microsoft.public.sharepoint.teamservices)
  • Sharepoint 2.0 causing problems with .NET applications?
    ... I'm having trouble getting our .NET applications to run on IIS web ... thought important was that the Sharepoint site had Sharepoint's ISAPI ... Exception Details: System.Security.SecurityException: Security error. ...
    (microsoft.public.sharepoint.windowsservices)
  • strong key problems
    ... i - how to create a strong key and use it in your applications. ... iv - any referencer to any app with strong name must also have a strong ... Unhandled Exception: System.Security.SecurityException: That assembly ... In the shared folder it still fails. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Running COBOL under z/os.e
    ... Application programming: z/OS.e does not run the following types of applications: CICS, IMS, COBOL (with an exception), Fortran, and PL/I. ... The COBOL exception is that precompiled COBOL DB2 stored procedures and other precompiled applications that use the Language Environment preinitialization interface are supported. ... These COBOL and PL/I applications could be compiled on a z/OS system, then run on a z/OS.e system. ...
    (bit.listserv.ibm-main)