Re: ASP.NET - SQL Server does not exist or access denied

From: Peter A. Schott (pschott@drivefinancial.com)
Date: 11/16/02 

From: Peter A. Schott <pschott@drivefinancial.com>
Date: Fri, 15 Nov 2002 17:20:33 -0600

Make sure that the account is set up with "Log on as a Service" and "Log on as
a batch" rights under the Local Security Settings in Admin Tools (Win2K and
.NET servers - can't remember about NT 4.0)

Also, a search in www.google.com for this error in Groups will provide some
links.

Make sure you've looked at your machine.config file as well (Windows
dir\Microsoft.NET\Framework\v1.0.3075\ ... something like this). You may need
to set your processModel section to use something other than "machine" for the
username.

You can put "SYSTEM" in this line and it seems to work, but that treats the
processes for ASP.NET as running under LocalSystem - a little too much access
for most people's tastes.

We created a Domain Account, added it to its own NT Group as default (to
ensure it would have no rights as a user), then set it up with the "log on"
rights above. After adding it to the processModel line in machine.config and
running IISRESET from the command line, everything worked great.

Seems that this is a bug in ASP.NET & ADO.NET (there was a Q article about it,
but I can't remember the number). The above instructions summarize the
workaround.

-Pete

"Dan C." <danc@nospam.com> wrote:

> I have an ASP.NET web site on a computer trying to connect
> to a SQL Server 6.5 on another computer; however I get
> a "SQL Server does not exist or access denied" error.
>
> The SQL Server is set up for Windows NT Integrated
> security mode.
>
> I tried adding the ASPNET account on the server (for both
> Windows and within SQL Server), however it needed a
> password I didn't know.
>
> I tried creating a new account on the server (sqltest) and
> adding:
> <identity impersonate="true" userName="sqltest"
> password="1234" />
> but that didn't work either. I kept getting a
> Configuration error: "Could not create Windows user token
> from the credentials specified in the config file. Error
> from the operating system 'A required privilege is not
> held by the client"
>
> How can I do this? Surely there must be a way since other
> ASP.NET web sites need to connect to a SQL Server. Most
> documents that I have read appear to indicate localhost
> remedies which don't work here.
>
> Thanks in advance.
>
> Dan

Relevant Pages

  • Re: VS2005: SQL Debugging "T-SQL execution ended without debugging. You may not have sufficient
    ... > account also must be a member of the sysadmin role in the target SQL ... and the Windows firewall is disabled on both client & server. ... to the remote SQL Server 2005. ... But I'm still getting the "T-SQL execution ended without debugging. ...
    (microsoft.public.vsnet.debugging)
  • Re: Utter madness!
    ... It is just Windows security stuff. ... You can get a trusted connection back to SQL server. ... ASP.NET account (either processModel or app pool identity depending on ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Passthrough authenication w/ SQL trusted connection
    ... separate connection will be used for each security context (each user ... account will have it's own pool). ... if you are using a Windows 2000 Domain, ... backend SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Search services not available
    ... Let me clarify that our SQL server uses Windows Authentication, ... account, even if it was just for now to get it working, that would be easier ... I have configured the Search service to use this ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Permissions!
    ... This account is used because your web ... application is configured for anonymous access instead of integrated ... The details on how to use Windows ... SQL Server MVP ...
    (microsoft.public.sqlserver.security)