Re: HWS - Cant browse HwsService.asmx

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I somewhat overlooked that you were using IIS 6 AppPools and assumed IIS 5 on XP - sorry about that..

The application pool identity should be the service user you selected for BizTalk HWS access when BizTalk was configured. So the user to give registry access to is the identity of the application pool.

I tried changing identity to Network Service for the HwsWSAppPool and was able to reproduce the same failure you are getting. Changing back to the service user (or giving Network Service read access) solved the problem.

Cheers,
Asbjorn

Danila wrote:
Thanks for your help.
I tryed your suggestion, but unfortunatelly, it didn't work.
I also tryed to go from another direction and added the aspnet account to the local administrators group on biztalk server computer. didn't work either :(
I guess Im missing something.

P.S. The biztak computer is a virtual PC, can this be the reason for all that mess?

"Asbjørn Rygg" wrote:

Hi,

You are right about your finding - the aspnet user may not have the read permissions it needs for the registry key. To give access open regedit and go to HKLM\SOFTWARE\Microsoft\BizTalk
Server\3.0\Hws\WebService\Identity\ASPNET_SETREG , right click the ASPNET_SETREG and select Permissions. Give the ASPNET user read permissions and you should be fine.

Cheers,
Asbjørn Rygg

Danila wrote:
Found a partial solution...
According to http://www.webservertalk.com/archive178-2004-8-362405.html
the problem is that aspnet_ws doesnt have permission to read registry values used to impersonate.
I went to webconfig of the hwsservice and manually edited the entry
<identity impersonate="true" userName="myUserName"
password="myPass"
/>
with values of the user who is adminstrator on the computer. Its working, but the values are in plain text. Ill keep looking and post m findings

.

Relevant Pages

  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP control
    ... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
    (microsoft.public.win2000.security)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... > permissions that you must have to run Internet Information Services ... > third-party applications in an IIS 5.0 environment. ... Open the properties for the %systemroot%\Winnt folder, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Digest Authentication
    ... It sounds like IIS is having problems impersonating the IUSR account, ... In IIS, you do not need Script Source or Write permissions unless you ... But the Digest authentication for windows domain is ...
    (microsoft.public.inetserver.iis)