IIS 6.0 and ASP.NET Permissions

dikkjo · July 16th, 2003, 08:55 AM

Hello,

i'm trying to build an application on a new IIS6.0 server.
i've configured a new WebSite with his own ApplicationPool that is running under the Network Service account. I've then enabled the Web Service Extension for the ASP.NET v1.4322.
Then, i've created the following simple web.config file :

Code:


<configuration>
<system.web>
  <customErrors mode="Off"/>
    <identity impersonate="false" />
    </system.web>
</configuration>

I then created a simple default.aspx page with only a table and NO ASP.NET code inside. But when I'm trying to view this page I get the following error :

Access to the path "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temp orary ASP.NET Files\root\91c4480e\bf3a669d" is denied.

I've added the read permissions for the Network Service account to ALL
the folders in this path and also to the C:\ root. The "Temporary ASP.NET Files" folders has write permissions.

The error still remain the same. I've noticed the those folders had the Read-Only restriction inherited from elsewhere, so I've changed this too, but without success.

Does anyone knowns something about?
I'm not sure that my ISP will accept to change his permission to the C:\ root...

Thanks.
Davide

dikkjo · July 16th, 2003, 11:15 AM

I forgot to mention that the Windows 2003 Server is a domain controller.

In msdn i've found that there was a bug with the .NET framework 1.0. and domain controllers, anyway resolved in version 1.1.

The currently installed version is v1.1.4322.

planeswalk · July 22nd, 2003, 09:00 PM

Hi,

You need to make sure that the ASPNET username has at least Read permissions to your root application. Open IIS 6.0, right-click your application, and click on Permissions. You can add the ASPNET account there.

Cheers!
Marlon

dikkjo · July 24th, 2003, 12:36 PM

hello planeswalk,

The permissions on my application are set to "Full Control" for Everyone, System, Network Service And IUSR_Machine...

The problem is that the ASPNET Account don't even exist on a Windows 2003 Server Domain Controller.

I've changed the identity of the Application Pool to "Local System" and nothing seems to change.

Since i'm now installing and configuring an openBSD box, and also finishing two other websites in old ASP, i plan to try to solve this prob next month...

Thnx Anyway

planeswalk · July 29th, 2003, 03:06 AM

Hi,

I believe there was this issue way back about .NET and domain controllers, although I can't remember the Microsoft support article number anymore :( Not sure if it still applies to Windows 2003, but try setting impersonation to "true" first instead of false and see if you still get the error.

Cheers!
Marlon