Re: Low Vs Medium Isolation Level

From: Bernard (qbernard_at_hotmail.com)
Date: 09/05/03


Date: Fri, 5 Sep 2003 12:20:49 +0800


Yes, when running medium pool or high isolation, the process
identiy will be iwam and iusr is the effective users. like MS use
to described, iwam is the bus driver and iusr is the passenger.

you need to grant iwam the same right as iusr, in you case write
permission in temp folder.

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Christopher Pragash" <chrispragash@hotmail.com> wrote in message
news:OoQ9YVxcDHA.2372@TK2MSFTNGP09.phx.gbl...
> Hello All,
>
> I'm working on a ASP web project that uses VB.NET middle tier components,
> CCW is used for interop. My application works fine if I set the IIS
> Application Protection property for the virtual directory to LOW but
throws
> up an error with a random file name stating it could not create a file
> (Access Denied).
>
> I tried to read through to find the differences, and found that the
primary
> difference being IIS uses IUSR_Machinename for LOW and runs within the
> InetInfo.exe process and uses the IWAM_Machinename and in a different
> process under the MEDIUM protection. I used the FileMon utility to figure
> out what caused the error and found out that IWAM_Machinename did not have
> access to the temp folder to create a file, and the process that was
trying
> to create a file was the dllHost.exe.
>
> I guess the error is not related to .NET Interop or is it? If this error
was
> not related to the Interop why did this error not pop up when my current
ASP
> pages running under MEDIUM protection attribute, are accessing the COM
> Objects?
>
> Any ideas would be of great help.
>
> Thanks and regards,
> Chris
>
>


Relevant Pages

  • Re: IWAM running as IUSR
    ... Take IWAM is a bus and IUSR is the passenger. ... > Resolved myself - process running as IWAM and impersonate aonymous user as ... >> So what is running as IWAM account? ...
    (microsoft.public.inetserver.iis.security)
  • Re: IWAM running as IUSR
    ... Take IWAM is a bus and IUSR is the passenger. ... > Resolved myself - process running as IWAM and impersonate aonymous user as ... >> So what is running as IWAM account? ...
    (microsoft.public.win2000.security)
  • Re: permission denied after XP upgrade
    ... It appears to be problems with IUSR_ - not sure whether ... >Try enabling auditing to see what account is being denied ... >and there's a problem with that account, such as the IWAM ... >> I use IIS as a web server locally for testing out web ...
    (microsoft.public.inetserver.iis.security)
  • Re: Securing IIS
    ... Those IUSR_ and IWAM_ were used to indicate the ... accounts used by IIS. ... > I think you are going to have to explain what are IUSR_ ... this is usually due to the IUSR_ account ...
    (microsoft.public.windowsxp.security_admin)

Loading