Service account still doesn't work



This is a follow up of my previous post "Service Account replaced by IUSR"

I'm still having problems with my app (see previous post).
After some testing I have discovered that the Web app can create a directory when
- the parent directory has the service account in its DACL (but it won't work when only the security group to which the account belongs is added to the DACL)
- the path is in "Windows notation", e.g. "D:\test" but not in UNC ("\\MYSERVER\d$\test")

So, me thinks that it has something to do with network credentials. I've found this snippet from a MSDN article :

"Note that you cannot have multiple Web applications with the same host name if you want them to have multiple identities and to use Kerberos authentication. This is an HTTP limitation, not a Kerberos limitation. The workaround is to have multiple Domain Name System (DNS) names for the same host, and then start the URLs for each Web application with a different DNS name. For example, you would use http://app1 and http://app2 instead of http://site/app1 and http://site/app2.";

I don't have much experience in DNS, and I wouldn't know how to do that.

Can anyone someone point me in the right direction ?

.



Relevant Pages

  • Re: Very slow processing on SSAS2005 Std (Core Duo, MSSQL on same box, different disks for DB and AS
    ... I think you have some network issues like DNS bad configuration. ... verify that the station and the server DNS server is the DC IP address. ... Setting the impersonation to 'Use Service Account' sorted it, ... I have a very simple cube, with around 500 fact table rows, a handful of very small dimensions, including a date dimension built by SSAS. ...
    (microsoft.public.sqlserver.olap)
  • Re: System reboot daily
    ... Have you look in the event log around the time of reboot to see if there is ... any helpful info, does this app require a service account and does that ... Is the app creating logs and is it using up disk space etc. ...
    (microsoft.public.win2000.general)
  • Re: Service account best practice/recommendation
    ... Do you mean AD management or folder access with NTFS permissions? ... My understanding for a service account is, ... - This service will be accessed by multiple machines from within the ... use ONE service account in domain that will be used from MULTIPLE ...
    (microsoft.public.windows.server.active_directory)
  • Re: Service account best practice/recommendation
    ... i never used service account the way you described it. ... Additional that is not only for AD, you can also use workgroup machines and create service accounts. ... - This service will be accessed by multiple machines from within ... - there are other third party services/applications running in AD ...
    (microsoft.public.windows.server.active_directory)
  • Re: Service account best practice/recommendation
    ... So creating the 2 accounts in the domain is ok and use them on multiple ... machines. ... Make sure they have really as less as possible permissions. ... use ONE service account in domain that will be used from ...
    (microsoft.public.windows.server.active_directory)