|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Win Server 2003 permission deniedParticulars: Wn Server 2003, DotNet 1.1 IIS 6
I have a web application that needs to determine a UNC of a file on the web server to send to another application server. I have developed two solutions, one using WNetGetUniversalName, and the other using NetShareEnum. Both work fine on an XP Pro server. Both work fine in a Windows.Net test app on the 2003 server with me logged in as an administrator. Both fail in the web app running on 2003 server. I have looked at all the security options, and have no clue which needs to be granted to the ASPNET user. Googling revealed nothing to me about this particular issue. Any help would be appreciated. Hello,
one great tool for combating access-denied messages is filemon from sysinternals (www.sysinternals.com). In Windows 2003, your web application is running in an App-Pool, which runs under the Network Service account by default. Greetings, Henning Krause Show quoteHide quote "Jim Brandley" <Jim.Brandley@IntercimNOSPAM.com> wrote in message news:uv$FAx4TGHA.4452@TK2MSFTNGP12.phx.gbl... > Particulars: Wn Server 2003, DotNet 1.1 IIS 6 > > I have a web application that needs to determine a UNC of a file on the > web server to send to another application server. I have developed two > solutions, one using WNetGetUniversalName, and the other using > NetShareEnum. Both work fine on an XP Pro server. Both work fine in a > Windows.Net test app on the 2003 server with me logged in as an > administrator. Both fail in the web app running on 2003 server. I have > looked at all the security options, and have no clue which needs to be > granted to the ASPNET user. Googling revealed nothing to me about this > particular issue. > > Any help would be appreciated. > I used both regmon and filemon and detected no access denied.
Show quoteHide quote "Henning Krause [MVP]" <newsgroups.rem***@this.infinitec.de> wrote in message news:%23zn$g44TGHA.4276@TK2MSFTNGP10.phx.gbl... > Hello, > > one great tool for combating access-denied messages is filemon from > sysinternals (www.sysinternals.com). > > In Windows 2003, your web application is running in an App-Pool, which > runs under the Network Service account by default. > > Greetings, > Henning Krause > > "Jim Brandley" <Jim.Brandley@IntercimNOSPAM.com> wrote in message > news:uv$FAx4TGHA.4452@TK2MSFTNGP12.phx.gbl... >> Particulars: Wn Server 2003, DotNet 1.1 IIS 6 >> >> I have a web application that needs to determine a UNC of a file on the >> web server to send to another application server. I have developed two >> solutions, one using WNetGetUniversalName, and the other using >> NetShareEnum. Both work fine on an XP Pro server. Both work fine in a >> Windows.Net test app on the 2003 server with me logged in as an >> administrator. Both fail in the web app running on 2003 server. I have >> looked at all the security options, and have no clue which needs to be >> granted to the ASPNET user. Googling revealed nothing to me about this >> particular issue. >> >> Any help would be appreciated. >> > > Do you have impersonation enabled?
Henning Krause Show quoteHide quote "Jim Brandley" <Jim.Brandley@IntercimNOSPAM.com> wrote in message news:%23LtvI74TGHA.4740@TK2MSFTNGP14.phx.gbl... >I used both regmon and filemon and detected no access denied. > > "Henning Krause [MVP]" <newsgroups.rem***@this.infinitec.de> wrote in > message news:%23zn$g44TGHA.4276@TK2MSFTNGP10.phx.gbl... >> Hello, >> >> one great tool for combating access-denied messages is filemon from >> sysinternals (www.sysinternals.com). >> >> In Windows 2003, your web application is running in an App-Pool, which >> runs under the Network Service account by default. >> >> Greetings, >> Henning Krause >> >> "Jim Brandley" <Jim.Brandley@IntercimNOSPAM.com> wrote in message >> news:uv$FAx4TGHA.4452@TK2MSFTNGP12.phx.gbl... >>> Particulars: Wn Server 2003, DotNet 1.1 IIS 6 >>> >>> I have a web application that needs to determine a UNC of a file on the >>> web server to send to another application server. I have developed two >>> solutions, one using WNetGetUniversalName, and the other using >>> NetShareEnum. Both work fine on an XP Pro server. Both work fine in a >>> Windows.Net test app on the 2003 server with me logged in as an >>> administrator. Both fail in the web app running on 2003 server. I have >>> looked at all the security options, and have no clue which needs to be >>> granted to the ASPNET user. Googling revealed nothing to me about this >>> particular issue. >>> >>> Any help would be appreciated. >>> >> >> > > Nope - Using forms authentication - this is an intranet app.
Show quoteHide quote "Henning Krause [MVP]" <newsgroups.rem***@this.infinitec.de> wrote in message news:e$Mc7D5TGHA.4300@TK2MSFTNGP14.phx.gbl... > Do you have impersonation enabled? > > Henning Krause > > "Jim Brandley" <Jim.Brandley@IntercimNOSPAM.com> wrote in message > news:%23LtvI74TGHA.4740@TK2MSFTNGP14.phx.gbl... >>I used both regmon and filemon and detected no access denied. >> >> "Henning Krause [MVP]" <newsgroups.rem***@this.infinitec.de> wrote in >> message news:%23zn$g44TGHA.4276@TK2MSFTNGP10.phx.gbl... >>> Hello, >>> >>> one great tool for combating access-denied messages is filemon from >>> sysinternals (www.sysinternals.com). >>> >>> In Windows 2003, your web application is running in an App-Pool, which >>> runs under the Network Service account by default. >>> >>> Greetings, >>> Henning Krause >>> >>> "Jim Brandley" <Jim.Brandley@IntercimNOSPAM.com> wrote in message >>> news:uv$FAx4TGHA.4452@TK2MSFTNGP12.phx.gbl... >>>> Particulars: Wn Server 2003, DotNet 1.1 IIS 6 >>>> >>>> I have a web application that needs to determine a UNC of a file on the >>>> web server to send to another application server. I have developed two >>>> solutions, one using WNetGetUniversalName, and the other using >>>> NetShareEnum. Both work fine on an XP Pro server. Both work fine in a >>>> Windows.Net test app on the 2003 server with me logged in as an >>>> administrator. Both fail in the web app running on 2003 server. I have >>>> looked at all the security options, and have no clue which needs to be >>>> granted to the ASPNET user. Googling revealed nothing to me about this >>>> particular issue. >>>> >>>> Any help would be appreciated. >>>> >>> >>> >> >> > > 
Other interesting topics
Tightening the default CAS policy
Online Only Digital Signature Windows Security Roles Role based security flaw? Least Privilege User Accounts GSSAPI bindings for C#/.NET How do I deistinguis between a user and a group/role bad encryption Assembly Trust Identifying group memberships for users authenticated with AD Trus |
|||||||||||||||||||||||
