Re: Permissions Problem

From: John Timney \(Microsoft MVP\) (timneyj_at_despammed.com)
Date: 07/03/04

  • Next message: Joe Fallon: "Re: How to remain checkBox status when datagrid page changed?"
    Date: Sat, 3 Jul 2004 21:44:44 +0100
    
    

    The crux of this is that the user under which you try to access the remote
    dir must be the same user that your script is running as. This become a
    real pain when you tie this in with permissions across domains. So, on your
    win3k box you need to impersonate in asp.net the user with permissions and
    allow asp.net to run on behlaf of that trusted user. I've not tried it
    between trusted domains, but it will be a pain I expect.

    Why dont you cut your losses and pass the text as a post request to your NT4
    web server and have asp create the file for you on the NT 4 box.

    --
    Regards
    John Timney
    Microsoft Regional Director
    Microsoft MVP
    "Brian Cooper" <cooperb@ingrambarge.com> wrote in message
    news:QtCFc.3796$XF5.2833@bignews4.bellsouth.net...
    > I am trying to determine a permission problem trying to write a text file
    > from one web server to another.
    >
    > Here is the situation:
    >
    > We have two domains in place one is Active Directory and the other is an
    old
    > NT4 domain. These two domains have a trust between them.
    >
    > On a 2003 server I am using the file system object to write a text file to
    a
    > NT4 web server. The folder on the NT 4 server currently is shared with
    open
    > security with control for everyone on Domain1 and Domain2. The 2003
    server's
    > worker process is running under a domain account that has full access to
    the
    > folder.
    >
    > I am able to map a drive to the share from the 2003 box to the NT4 box
    while
    > logged in with an admin account of the 2003 box. I am also able to run a
    > .vbs script on the 2003 box that is able to place a text file on the NT4
    > box. Of course, I do believe that script runs and creates the file system
    > object as the logged in user of the 2003 box.
    >
    > Now to the non-working part. On my asp.net and classic asp page I am
    unable
    > to write a text file from the 2003 box to the NT4 box at all. The virtual
    > server(s) that are serving the pages have anon security turned on and use
    > the IUSR_MachineName account. Since I have every permission imaginable
    added
    > to the folder on the NT4 box for both domains at full control. My theory
    is
    > that possibly the IUSR account is the account that is actually creating
    the
    > object and trying to place the text file. I only theorize this because I
    can
    > not place the text file and that account seems to be the only one w/o
    > permissions to that folder since it is a local machine account and not a
    > domain account.
    >
    > So my real question here is if my theory is right and/or what exactly is
    > going on here. After spending much too long on this problem and feeling
    like
    > a noob I am at a loss as to what to try next. Any suggestion would be
    > greatly appreciated.
    >
    > Thank you)
    >
    >
    

  • Next message: Joe Fallon: "Re: How to remain checkBox status when datagrid page changed?"

    Relevant Pages

    • Permissions Problem
      ... I am trying to determine a permission problem trying to write a text file ... from one web server to another. ... NT4 web server. ... logged in with an admin account of the 2003 box. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Hooking up to another web server in the Network
      ... The fact that the other system has a web server really doesn't matter. ... >>am tryin to do is access a folder on the drive of the other system because that has more room than this server. ... >>account complete with password. ... >>course I don't want IUSR_MachineNameServer1 to have that level of permissions. ...
      (microsoft.public.inetserver.iis)
    • Re: Mailbox maps to Sid when running Data collection
      ... Priniciple through a trust relationship to the NT4 domain. ... Basically you have the SID on two objects currently 1 on a Windows Account, ... add permissions for the NT4 Account. ...
      (microsoft.public.exchange.setup)
    • Re: Access Denied
      ... Determine the account ... is running under and grant it modify permissions on the folder where you ... > local machine but when I use the Web Service to log the error, ... > How can I overcome this security issue on a Web Server so that I can write ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: server application unavailable
      ... You should, generally, avoid running a web server on a domain controller. ... you should create a weaker account to run the webserver as. ... So i granted it the permissions and it works. ...
      (microsoft.public.dotnet.framework.aspnet)