VS.NET Create Web Application Hang

From: Keith Jakobs, MCP (elohir_at_NOSPAM.hotmail.com)
Date: 03/24/05 

Date: Thu, 24 Mar 2005 12:24:03 -0800

Greetings:

I had seen several posts around the Internet about this issue from a few
months back, but have been unable to find a resolution ...

I have a user who is trying to get started with Visual Studio.NET 2003. We
have uninstalled and reinstalled the Product.... then we did a complete
cleanout of development products, re-installed IIS, and reinstalled JUST
Visual Studio.NET 2003 with Framework 1.1 (no more 2002 edition or Framework
1.0)... and even went so far as to delete his profile and create it from
scratch... yet he still has the same issue:

Every time he tries to create a VB.NET web application inside the Visual
Studio.NET IDE, the environment hangs while 'Initializing offline cache...'
(message appearing in lower left corner of IDE window).

We have tried having other users log on. They have no issue starting the
environment and creating a blank web application. These users include
individuals that have both more restricted and completely unrestricted
permissions (Domain Admins) on the network/domain. All of them can create a
web application in the IDE. We even created a local account for him to
test, even though he has local administrative rights using his own domain
account. That local account allows him to create a web app, but not his
domain account.

As an additional test, this user was temporarily made a member of the Domain
Admins group, which should have no restrictions in our domain. The user
profile was deleted again, and created with the user as a Domain Admin. He
still has no success creating a web application inside the VS.NET IDE.

We do have several Group Policy objects in effect on our domain, but without
knowing what permission or security setting might be preventing the offline
cache from initializing, it would be difficult, if not impossible, to debug
the GPO's (this is a Windows 2000 domain only with no XP nor 2003... so RSOP
and GPMC tools are not available). Also, we have moved both his computer
and his user account to an OU that blocks all policy inheritance, so I am
hoping it is a local machine issue and not a GPO or security issue.

Actually, I am reasonably confident that this is not a permission nor a
security issue because not only does making him a Domain Admin have no
impact - he is still unable to create a new web app with that group
membership - but also because without elevated DOMAIN permissions, he has no
issue creating web apps on other computers that have Visual Studio.NET
installed, which are also on computers that have GPO's applied to them.

Yes, IIS is running on his box, and applications do execute there...
however, we also had problms with even running .NET apps on his system
originally, which is what prompted the complete uninstall and re-install of
the infrastructure.

I know this may be a difficult issue, but I also know from other posts, that
this issue is not unique to our environment. Any help that can be suggested
or provided would be GREATLY appreciated.

Thank you in advance.

Keith C. Jakobs, MCP

Relevant Pages

  • Re: Finding a Hacker
    ... definitely had the capability to obtain the domain admin credentials and may ... If the hacker did get in remotely using an administrator account on the ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Need to filter domain admin from GPO
    ... But think always about the part that a deny is the highest blocking you set and if you forget that you have set a deny or you are not in and someone else have to search for errors, it will be really heavy to find it. ... It's best practice to use a 2nd administrator account as your ... Block inheritance (I would have to move the domain admin from ... particular GPO using ACL deny. ...
    (microsoft.public.windows.group_policy)
  • Re: Administrator--Client installation account problem
    ... I stated the account was only required to be a ... Of course if it is a domain admin that works also. ... Jeff said to use a Regular domain user, ... You do not have to be in advanced security to push the client. ...
    (microsoft.public.sms.admin)
  • Re: Need to filter domain admin from GPO
    ... Normally Block inheritance works fine. ... What GPO setting do you like to filter? ... It's best practice to use a 2nd administrator account as your regular ... Block inheritance (I would have to move the domain admin from ...
    (microsoft.public.windows.group_policy)
  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... Warren Brunk - MCITP - SQL 2005, ... Add it as a login to the SQL Server ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)