|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Adobd errors Permission denied IIS6Ok here is the situation we have recently upgraded our 2000 server to 2003.
We have several Virtual directories that authenticate anonymously, everything was working fine on the 2000 server. Now we experience errors when loading asp pages pointing to either mdb or sql, unless I perform the workaround below. I haave looked at Subauthentication and nothing seems to work. Current workaround I have to go into one of the virual directories and switch from anonymous to IWA login using IE as administrator, Page loads fine. I then go back and switch to AA and things work for a while and then back to error -- Suggestions Appreciated what's the full error msgs ?
does the app need additional permissions ? by default, app pool identity is using network service, do you need to grant permission to this account ? find out what permission the app need, then grant permissions to the user account accordingly. -- Show quoteHide quoteRegards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ "Infodon" <info***@discussions.microsoft.com> wrote in message news:92C08126-ACAB-4782-AA00-77ADE2FD907E@microsoft.com... > Ok here is the situation we have recently upgraded our 2000 server to > 2003. > We have several Virtual directories that authenticate anonymously, > everything > was working fine on the 2000 server. Now we experience errors when loading > asp pages pointing to either mdb or sql, unless I perform the workaround > below. I haave looked at Subauthentication and nothing seems to work. > > Current workaround I have to go into one of the virual directories and > switch from anonymous to IWA login using IE as administrator, Page loads > fine. I then go back and switch to AA and things work for a while and then > back to error > -- > Suggestions Appreciated Basically the ASP pages error out with the adobd.connection error permission
denied similar on the ASP pointing to SQL pages. I have reverted back to IIS5 compatiblity mode because the problem doesn't seem to occur. I would prefer to go to App pools but none of the identities seem to work even if granted full permissions in NTFS. I tried Local System, local service and network service. I did not try a specific identity. What is interesting is switching from IWA login as admin and switch back to anonymous works for a while? That one is a real head scratcher for me... Do you have any information about migrating from compatibilty mode to worker process. I noticed that there were some errors in the event log related to the worker process. Event ID 2266 The account that the current worker process does not have the SeTCBPrivilege privilege, the anonymous passworrd sync and digest authenication are disabled. I cannot find anything out about how or where to grant the appropriate privileges, ... Show quoteHide quote "Bernard" wrote: > what's the full error msgs ? > does the app need additional permissions ? > by default, app pool identity is using network service, do you need to grant > permission to this account ? > > find out what permission the app need, then grant permissions to the user > account accordingly. > > -- > Regards, > Bernard Cheah > http://www.tryiis.com/ > http://support.microsoft.com/ > http://www.msmvps.com/bernard/ > > > "Infodon" <info***@discussions.microsoft.com> wrote in message > news:92C08126-ACAB-4782-AA00-77ADE2FD907E@microsoft.com... > > Ok here is the situation we have recently upgraded our 2000 server to > > 2003. > > We have several Virtual directories that authenticate anonymously, > > everything > > was working fine on the 2000 server. Now we experience errors when loading > > asp pages pointing to either mdb or sql, unless I perform the workaround > > below. I haave looked at Subauthentication and nothing seems to work. > > > > Current workaround I have to go into one of the virual directories and > > switch from anonymous to IWA login using IE as administrator, Page loads > > fine. I then go back and switch to AA and things work for a while and then > > back to error > > -- > > Suggestions Appreciated > > > Now, try this
http://www.eventid.net/display.asp?eventid=2266&eventno=3057&source=W3SVC-WP&phase=1 -- Show quoteHide quoteRegards, Bernard Cheah http://www.tryiis.com/ http://support.microsoft.com/ http://www.msmvps.com/bernard/ "Infodon" <info***@discussions.microsoft.com> wrote in message news:7496E2E0-67F2-4EED-B9B6-304D21A308A6@microsoft.com... > Basically the ASP pages error out with the adobd.connection error > permission > denied similar on the ASP pointing to SQL pages. I have reverted back to > IIS5 > compatiblity mode because the problem doesn't seem to occur. I would > prefer > to go to App pools but none of the identities seem to work even if granted > full permissions in NTFS. I tried Local System, local service and network > service. I did not try a specific identity. What is interesting is > switching > from IWA login as admin and switch back to anonymous works for a while? > That > one is a real head scratcher for me... > > Do you have any information about migrating from compatibilty mode to > worker > process. I noticed that there were some errors in the event log related to > the worker process. > > Event ID 2266 > > The account that the current worker process does not have the > SeTCBPrivilege > privilege, the anonymous passworrd sync and digest authenication are > disabled. > > I cannot find anything out about how or where to grant the appropriate > privileges, ... > > > > "Bernard" wrote: > >> what's the full error msgs ? >> does the app need additional permissions ? >> by default, app pool identity is using network service, do you need to >> grant >> permission to this account ? >> >> find out what permission the app need, then grant permissions to the user >> account accordingly. >> >> -- >> Regards, >> Bernard Cheah >> http://www.tryiis.com/ >> http://support.microsoft.com/ >> http://www.msmvps.com/bernard/ >> >> >> "Infodon" <info***@discussions.microsoft.com> wrote in message >> news:92C08126-ACAB-4782-AA00-77ADE2FD907E@microsoft.com... >> > Ok here is the situation we have recently upgraded our 2000 server to >> > 2003. >> > We have several Virtual directories that authenticate anonymously, >> > everything >> > was working fine on the 2000 server. Now we experience errors when >> > loading >> > asp pages pointing to either mdb or sql, unless I perform the >> > workaround >> > below. I haave looked at Subauthentication and nothing seems to work. >> > >> > Current workaround I have to go into one of the virual directories and >> > switch from anonymous to IWA login using IE as administrator, Page >> > loads >> > fine. I then go back and switch to AA and things work for a while and >> > then >> > back to error >> > -- >> > Suggestions Appreciated >> >> >>
Change in ASP.Net authentication between Win2000 and Win2003
401.1 After IIS6 Setup AES 256-bit Certificate multiple SSL sites on single IP/port Firewall and Win 2K OWA Exploit RE: How to create a client side certificate on a Windows 2000 Serv Re: IIS metabase permissions when creating new VirDir's Integrated Windows Authentication Error, IIS Security Risks & Vulnerabilities |
|||||||||||||||||||||||