Hello!  I have installed the .NET framework onto a Windows 2000 Server

machine that is a domain controller.



First, I imagine this probably isn't the best thing to do for security

purposes but a sufficiently locked-down brochure only website is already

running on the machine...



But I cannot seem to get the .aspx pages to run even after assigning a new

account for the aspnet_wp.exe.  I looked at the regenresx.exe program from

gotdotnet.com but I can't seem to make that work either.



Does anyone have any hints for me to start so I can begin using the ASP.NET

pages instead of my old ASP pages?  ASP pages work fine.  Thank you all for

your help... I'm really confused at the moment!



Yours

Arbon Reimer

Hi Arbon,



Here are some details on how to enable ASP.NET on a Domain Controller:



--------------------------------------------------------



By default ASP.NET runs the ASP.NET worker process using a

non-adminitrative windows account called "ASPNET".  This restricts what

an ASP.NET application can do on a machine -- and requires

administrators to explicitly grant security permissions. 



However, on Windows Domain Controller machines (this includes the

Windows Small Business Server product) the ASPNET account cannot be used

-- since non-administrative local accounts cannot be created and used

(the security policy of a Windows Domain Controller machine prevents

this). 



If you attempt to use the default ASPNET account when running an ASP.NET

page on a Windows Domain Controller, the worker process will fail to

start -- most likely with an error message similar to the one below:



   "aspnet_wp.exe could not be launched because the username and/or

password supplied in the processModel section of the config file are

invalid"



To fix this, it is necessary to configure ASP.NET to instead use the

LocalSystem account after setup.  This is done by modifying the

<processModel> tag within the Machine.Config configuration file

installed in the below location:



    c:\Windows\Microsoft.Net\Framework\V1.0.3705\Config\Machine.Config



By default you will find that the <processModel> configuration tag has a

"userName" attribute set to the value: "MACHINE".  Changing this value

to "SYSTEM" will cause ASP.NET to instead use the LocalSystem account

when executing.  This account *does* have permission to run on Windows

Domain Controllers.



After making the change to the Machine.Config XML file, save it, and

then restart IIS (iisreset).  ASP.NET will then be using the LocalSystem

account to run its worker process, and ASP.NET will function fine on

domain controllers.





-----Original Message-----

From: Arbon Reimer [mailto:arbon_Reimer@h...]

Sent: Saturday, February 02, 2002 7:13 AM

To: ASP+

Subject: [aspx] Problems getting V1 to work on DC...help!





Hello!  I have installed the .NET framework onto a Windows 2000 Server

machine that is a domain controller.



First, I imagine this probably isn't the best thing to do for security

purposes but a sufficiently locked-down brochure only website is already

running on the machine...



But I cannot seem to get the .aspx pages to run even after assigning a

new account for the aspnet_wp.exe.  I looked at the regenresx.exe

program from gotdotnet.com but I can't seem to make that work either.



Does anyone have any hints for me to start so I can begin using the

ASP.NET pages instead of my old ASP pages?  ASP pages work fine.  Thank

you all for your help... I'm really confused at the moment!



Yours

Arbon Reimer