Home All Groups Group Topic Archive Search About

Adobd errors Permission denied IIS6

Author
23 Mar 2005 8:47 PM
Infodon
Ok here is the situation we have recently upgraded our 2000 server to 2003.
We have several Virtual directories that authenticate anonymously, everything
was working fine on the 2000 server. Now we experience errors when loading
asp pages pointing to either mdb or sql, unless I perform the workaround
below. I haave looked at Subauthentication and nothing seems to work.

Current workaround I have to go into one of the virual directories and
switch from anonymous to IWA login using IE as administrator, Page loads
fine. I then go back and switch to AA and things work for a while and then
back to error
--
Suggestions Appreciated

Author
24 Mar 2005 2:51 AM
Bernard
what's the full error msgs ?
does the app need additional permissions ?
by default, app pool identity is using network service, do you need to grant
permission to this account ?

find out what permission the app need, then grant permissions to the user
account accordingly.

Show quoteHide quote
"Infodon" <info***@discussions.microsoft.com> wrote in message
news:92C08126-ACAB-4782-AA00-77ADE2FD907E@microsoft.com...
> Ok here is the situation we have recently upgraded our 2000 server to
> 2003.
> We have several Virtual directories that authenticate anonymously,
> everything
> was working fine on the 2000 server. Now we experience errors when loading
> asp pages pointing to either mdb or sql, unless I perform the workaround
> below. I haave looked at Subauthentication and nothing seems to work.
>
> Current workaround I have to go into one of the virual directories and
> switch from anonymous to IWA login using IE as administrator, Page loads
> fine. I then go back and switch to AA and things work for a while and then
> back to error
> --
> Suggestions Appreciated
Author
24 Mar 2005 4:13 PM
Infodon
Basically the ASP pages error out with the adobd.connection error permission
denied similar on the ASP pointing to SQL pages. I have reverted back to IIS5
compatiblity mode because the problem doesn't seem to occur. I would prefer
to go to App pools but none of the identities seem to work even if granted
full permissions in NTFS. I tried Local System, local service and network
service. I did not try a specific identity. What is interesting is switching
from IWA login as admin and switch back to anonymous works for a while? That
one is a real head scratcher for me...

Do you have any information about migrating from compatibilty mode to worker
process. I noticed that there were some errors in the event log related to
the worker process.

Event ID 2266

The account that the current worker process does not have the SeTCBPrivilege
privilege, the anonymous passworrd sync and digest authenication are disabled.

I cannot find anything out about how or where to grant the appropriate
privileges, ...



Show quoteHide quote
"Bernard" wrote:

> what's the full error msgs ?
> does the app need additional permissions ?
> by default, app pool identity is using network service, do you need to grant
> permission to this account ?
>
> find out what permission the app need, then grant permissions to the user
> account accordingly.
>
> --
> Regards,
> Bernard Cheah
> http://www.tryiis.com/
> http://support.microsoft.com/
> http://www.msmvps.com/bernard/
>
>
> "Infodon" <info***@discussions.microsoft.com> wrote in message
> news:92C08126-ACAB-4782-AA00-77ADE2FD907E@microsoft.com...
> > Ok here is the situation we have recently upgraded our 2000 server to
> > 2003.
> > We have several Virtual directories that authenticate anonymously,
> > everything
> > was working fine on the 2000 server. Now we experience errors when loading
> > asp pages pointing to either mdb or sql, unless I perform the workaround
> > below. I haave looked at Subauthentication and nothing seems to work.
> >
> > Current workaround I have to go into one of the virual directories and
> > switch from anonymous to IWA login using IE as administrator, Page loads
> > fine. I then go back and switch to AA and things work for a while and then
> > back to error
> > --
> > Suggestions Appreciated
>
>
>
Author
25 Mar 2005 1:52 AM
Bernard
Now, try this
http://www.eventid.net/display.asp?eventid=2266&eventno=3057&source=W3SVC-WP&phase=1

Show quoteHide quote
"Infodon" <info***@discussions.microsoft.com> wrote in message
news:7496E2E0-67F2-4EED-B9B6-304D21A308A6@microsoft.com...
> Basically the ASP pages error out with the adobd.connection error
> permission
> denied similar on the ASP pointing to SQL pages. I have reverted back to
> IIS5
> compatiblity mode because the problem doesn't seem to occur. I would
> prefer
> to go to App pools but none of the identities seem to work even if granted
> full permissions in NTFS. I tried Local System, local service and network
> service. I did not try a specific identity. What is interesting is
> switching
> from IWA login as admin and switch back to anonymous works for a while?
> That
> one is a real head scratcher for me...
>
> Do you have any information about migrating from compatibilty mode to
> worker
> process. I noticed that there were some errors in the event log related to
> the worker process.
>
> Event ID 2266
>
> The account that the current worker process does not have the
> SeTCBPrivilege
> privilege, the anonymous passworrd sync and digest authenication are
> disabled.
>
> I cannot find anything out about how or where to grant the appropriate
> privileges, ...
>
>
>
> "Bernard" wrote:
>
>> what's the full error msgs ?
>> does the app need additional permissions ?
>> by default, app pool identity is using network service, do you need to
>> grant
>> permission to this account ?
>>
>> find out what permission the app need, then grant permissions to the user
>> account accordingly.
>>
>> --
>> Regards,
>> Bernard Cheah
>> http://www.tryiis.com/
>> http://support.microsoft.com/
>> http://www.msmvps.com/bernard/
>>
>>
>> "Infodon" <info***@discussions.microsoft.com> wrote in message
>> news:92C08126-ACAB-4782-AA00-77ADE2FD907E@microsoft.com...
>> > Ok here is the situation we have recently upgraded our 2000 server to
>> > 2003.
>> > We have several Virtual directories that authenticate anonymously,
>> > everything
>> > was working fine on the 2000 server. Now we experience errors when
>> > loading
>> > asp pages pointing to either mdb or sql, unless I perform the
>> > workaround
>> > below. I haave looked at Subauthentication and nothing seems to work.
>> >
>> > Current workaround I have to go into one of the virual directories and
>> > switch from anonymous to IWA login using IE as administrator, Page
>> > loads
>> > fine. I then go back and switch to AA and things work for a while and
>> > then
>> > back to error
>> > --
>> > Suggestions Appreciated
>>
>>
>>