Re: IIS_WPG and NETWORK SERVICE

SBS2003 is "different again" from vanilla servers. In particular, it has
IIS6 running on the "Domain Controller" machine which causes the
"differences" that you are observing.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Larry" <Larry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B9A38124-01C7-4EE6-9ADE-CF6E4FB67CBF@xxxxxxxxxxxxxxxx
I have an ASP.NET site hosted on an SBS 2003 server. The server is a day
old
and no changes have been made to IIS with respect to user rights, etc.
I have configured IIS_WPG to have the rights necessary to access what
needs
to be accessed on my site folder. I have set this up many times before
via
the same script on non-SBS servers. However, the web app cannot
manipulate
the folder as it should be able to based on these rights. I have verified
this by temporarily giving "everyone" full rights to the folder and the
web
app runs fine.
I know that ASP.NET application is running in a pool where NETWORK SERVICE
is the runtime context:
System.Security.Principal.WindowsIdentity.GetCurrent().Name = NT
AUTHORITY\NETWORK SERVICE

I have read a couple articles that explain that on a fresh install of IIS
6,
"NETWORK SERVICE" should be a member of IIS_WPG. Well, on my new install,
it
is not.
So, I opened up the DefaultAppPools node of IIS Mgr and opened the IIS_WPG
Properties and at the "Members" tab, no "NETWORK SERVICE" in the list.
There
is IWAM_machinename, and "SharePoint...bla.bla.". I attempt to add
"NETWORK
SERVICE", but it does not appear to be a user that can be selected from
Active Directory.
I am stuck at this point because either the OS has a bug, SBS 2003 is
"different again" from vanilla servers, the MSDN article is wrong, or I'm
seeing things.
I will be greatly appreciative if someone can tell me which is the case
and
set me straight.
Regards,
Larry


.

Relevant Pages

  • Re: Working on a Web Server 2003
    ... I tried the default permissions and user rights in the artical 812614. ... Network Service: where should it rights be applied? ... > Are you trying to setup and secure a webserver on a DC? ... > A built in account that has a high level of access rights ...
    (microsoft.public.windows.server.active_directory)
  • Re: Working on a Web Server 2003
    ... I tried the default permissions and user rights in the artical 812614. ... Network Service: where should it rights be applied? ... > Are you trying to setup and secure a webserver on a DC? ... > A built in account that has a high level of access rights ...
    (microsoft.public.inetserver.iis)
  • Re: IIS_WPG and NETWORK SERVICE
    ... Network Service should be available from the drop-down list of preconfigured ... identities (along with Local System and Local Service). ... :I have an ASP.NET site hosted on an SBS 2003 server. ... and no changes have been made to IIS with respect to user rights, ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS 6.0 Network services startup
    ... Make sure that Network Service is a member of the IIS_WPG group, ... check the following user rights under local security policy: ... reboot the server and try again (simply restarting IIS will not work). ... application pools are up and running. ...
    (microsoft.public.inetserver.iis.security)