In my home network, I have a Windows 2000 Advanced Server with .net 1.1. I recently reconfigured the box to act as a domain controller for an Active directory services tree. Since then, I've been unable to run ASP.net applications due to a security problem. I get an error like this:
Access to the path "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Tempor ary ASP.NET Files\root\9c4ac7bd\97d3c1c0\global.asax.xml" is denied.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.UnauthorizedAccessException: Access to the path "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Tempor ary ASP.NET Files\root\9c4ac7bd\97d3c1c0\global.asax.xml" is denied.

ASP.NET is not authorized to access the requested resource. Consider granting access rights to the resource to the ASP.NET request identity. ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5 or Network Service on IIS 6) that is used if the application is not impersonating. If the application is impersonating via <identity impersonate="true"/>, the identity will be the anonymous user (typically IUSR_MACHINENAME) or the authenticated request user.

To grant ASP.NET write access to a file, right-click the file in Explorer, choose "Properties" and select the Security tab. Click "Add" to add the appropriate user or group. Highlight the ASP.NET account, and check the boxes for the desired access.

Now, I know that this it probably being caused by permissions on the directory because of the changes I made, but I'm not sure what I can do to fix it. I checked the file system permissions on "Temporary ASP.NET Files" and I did NOT see the {machine}\ASPNET account listed. So I added it with full control. I also added in the IUSR_MACHINENAME account with full control (to cover the impersonation possibility even though I know I'm not using that). In both cases, I checked the box to reset all child object's permissions and allow parental permission propagation. After and IISRESET, no luck.

Anyone have any ideas? I vaguely remember hearing something about problems with running asp.net on a active directory domain controller, but I can't remember what/where it was. Been looking around and can't find anything yet.

__________________
-Peter
compiledthoughts.com
twitter/peterlanoie

Hi Peter,

I think what you're referring to is this article: http://support.microsoft.com/default...en-us%3B315158

By default, ASP.NET looks for a local ASPNET account. However, by promoting your machine to a PDC, all accounts are now domain accounts.

The odd thing is, the article says the problem does no longer occur in ASP.NET 1.1.

You may want to take a look at the password for the ASP account under the processModel node in your Machine.config file. It should be set to autogenerate (on a machine that is not a PDC).....


Imar

---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

Ok, I got it working now. I added the IWAM_ account to the directory (and actually removed IUSR_ and ASPNET) and it's working now. I didn't realize they changed the account! Thanks.

Peter
------------------------------------------------------
Work smarter, not harder.

I am having the same problem. Could you be more specific about how you fixed it? When you say you added the IWAN_MachineName account to the directory what exactly do you mean? I see that account in my directory already?

Thanks for any feedback.