RE: Permission denied when writing to eventlog from global.asa

From: Jonas Back (jonasback_at_noway.com)
Date: 06/03/05


Date: Fri, 3 Jun 2005 03:40:03 -0700

Thanks for helping out!

We don't allow anonymous access to the page. That is - we have unchecked the
box "Enable anonymous access" on the "Directory Security" tab on the website
configuration. How do I do it then?

Is it maybe still the |USR-MACHINENAME account that tries to write to the log?

Thanks!

""WenJun Zhang[msft]"" wrote:

> Hi,
>
> If the ASP page allows anonymous access, its idenity should be
> IUSR_<machinename> account (can be viewed in computer management).
> This is local account which shouldn't be in domain users. So you will
> need to change the CustomSD with its sid. Also you may remove IUSR
> from guests group (by default it's in guests). As I know, accounts
> included in guests may be restricted to write event log as well.
>
> Thanks.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Partner Support
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>



Relevant Pages

  • Re: Cannot open log for source {0} -- again
    ... "Nicole Calinoiu" wrote: ... >> whole thing seems to be the Guests group. ... with the exception of being able to write to the event log. ... What difference does it make if I create a new account to run the application ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: cannot access event viewer logs "Access Denied"
    ... Can you access the event log in Safe mode? ... Please check if your account is in the Guests group. ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.migration)
  • Re: 401.1 Error w/ Anonymous Access
    ... > - I've set up a local account on the machine (Win2000 Professional, ... > - In the local machine's Local Security Policy I've allowed SiteUser to ... I am under the impression that if Anonymous Access is ... IIS will treat the request as if it is coming from the user ...
    (microsoft.public.inetserver.iis.security)
  • Re: iis 6.0
    ... How IIS Authenticates Browser Clients ... >>An IIS account for anonymous access to IIS. ... >>will be the process identity, ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTP/1.1 401 Access Denied - when trying to access a .jsp page
    ... local system account which has full priviledges. ... If your upgrade was to IIS ... The jsp page fails now because of some tightened security that happened ... Even though it is 'configured for anonymous access' ...
    (microsoft.public.inetserver.iis.security)