Re: access denied in an asp.net 2.0 application when accessing a d

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks for the response Eric,

I think it should be OK. Since you're using IIS6, if the ASP.NET
application virtual dir is configured to use the Default Application Pool
and your ASP.NET dosn't use impersonate, it should be the NT
AUTHORITY\NETWORK SERVICE account. Anyway, you can use the below code to
printout the security identity of the current running thread:

Response.Write("<br/>" +
System.Security.Principal.WindowsIdentity.GetCurrent().Name);

BTW, as for the "Network Service" account you mentioned when configure the
UNC share's permission, are you sure you are refering to the ASP.NET
server's Network Service account( rather than the UNC share machine's
Network Service account)? Network Service just represent machine's account
so it differs from machine to machine.

In addition, you can turn on the File access Audit for that UNC folder on
that machine, this can help capture the Access failture log.

3How To Audit User Access of Files, Folders, and Printers in Windows XP
http://support.microsoft.com/kb/310399/en-us

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

.

Relevant Pages

  • W3WP Access Denied
    ... When the w3wp service first starts on my Windows 2003 SBS server, ... under the NETWORK SERVICE account, and the world is a wonderful place. ... when I call on a web service that loads a DLL to to some ...
    (microsoft.public.inetserver.iis)
  • Re: Network service WMI
    ... Alex wrote: ... E.g. WMIPRVSE.EXE is running LOCAL but also there is an service running as NETWORK SERVICE. ... Network Service is just another service account like LocalSystem. ... SAPIEN Technologies - Scripting, Simplified. ...
    (microsoft.public.windowsxp.wmi)
  • Re: kerberos SQL service accounts
    ... You'll get the best match of "Kerberos working by default" and good security by deciding to use Network Service as the service account for SQL rather than either System or a fixed domain account. ... The reason for this is that when SQL is installed and configured to be run under either Network Service or System, the installer will actually add the appropriate Kerb SPNs to the domain computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM - Domain Service Account V.S. Network Service
    ... The only reason I can think of to use a different service account than ... NETWORK SERVICE on a domain-joined box would be that there is an important ... instances of an ADAM instance using the same DNS name behind NLB and you ... account so it can get the SPN for the DNS name. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Impersonating doesnt work on Win2003
    ... i've also tried "Network Service" for the same result ... i'm trying to browse a UNC share through an ASP.NET application and i've ... Logon failure: unknown user name or bad password. ...
    (microsoft.public.dotnet.framework.aspnet)