Re: IIS6 on DC failing ASP.Net Service Unavailable

From: Max Metral (memetral_at_hotmail.com)
Date: 05/02/04


Date: Sun, 2 May 2004 12:53:33 -0400

I was afraid of needing IISState, given that it means debug symbols and all
that and was hoping to keep this machine relatively clean, but if it has to
be done...

The app doesn't work with Network Service because I can't give it any perms
for network resources (since it's not a domain account). The custom
identity is in the IIS_WPG group, and all my perms and policies are using
the IIS_WPG group (which incidentally didn't seem to have proper perms in
the first place, eg to Temp asp files for example).

"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:e5HqNe%23LEHA.3380@TK2MSFTNGP11.phx.gbl...
> On IIS 6.0 ASP.NET does not use the ASPNET account. It uses the process
> identity of the web app pool that it is assigned to.
>
> Q1) Does you app work if you use one of the standard process identities?
(eg
> Network Service or LocalSystem)?
>
> Q2) If you are using a custom identity (eg ASP.NET) is it in the IIS_WPG
> group?
>
> Q3) You may need to use IISState to troubleshoot this issue:
> http://www.iisfaq.com/default.aspx?view=P197
>
> Cheers
> Ken
>
> "Max Metral" <memetral@hotmail.com> wrote in message
> news:ETCdnVldsavppAndRWPC-w@speakeasy.net...
> : I've done all the searching I can and all the tweaking, but to no avail.
> : I'm trying to run an ASP.Net app on a DC that uses a Sql Server db. I
put
> : the application in its own application pool and assigned it to use the
> : ASPNET *domain* account (reenabled that account that was previously
> : disabled). I get "Service Unavailable". I did the normal things:
> :
> : * assigned rights to the ASP temp dir
> : * aspnet_regiis -i
> : * Added logon batch/service, bypass traverse to IIS_WPG
> : * ran regmon and as a result added perms to
ControlSet001\W3SVC\Parameters
> : * reran regmon to confirm no access denied
> : * ran filemon and did not see any failures
> : * turned on all auditing in domain policy and verified it propagated to
> : local policy
> : * Created a fresh user, assigned it to IIS_WPG, same crap.
> :
> : Still nothing. Now if I add ASPNET to administrators, everything works
> : fine. This is such a violation of logic since I have FULL auditing
turned
> : on, filemon and regmon running, and NONE of them log any failures.
> : Somebody, somewhere, is doing something evil in Microsoft-written code.
> :
> : The only peep I get in the logs is the standard:
> :
> : A process serving application pool 'DbApps' terminated unexpectedly. The
> : process id was '4776'. The process exit code was '0xffffffff'.
> :
> : Which of course tells me nothing.
> :
> : What can I do?
> :
> : Thanks.
> :
> :
>
>



Relevant Pages

  • Re: IIS6 Network Service Identity - when needed?
    ... This is because an application's permissions is something that a developer ... corresponding app pools) based on the characteristics of the .Net code. ... can/can't run with the Network Service identity. ... administrative-level privileges. ...
    (microsoft.public.inetserver.iis.security)
  • Re: "The underlying connection was closed: Could not establish trust relationship for the SSL/TLS se
    ... You're making a remote method call to a network service. ... your app has a dependency upon something it has no control ... app has no control. ...
    (microsoft.public.dotnet.framework)
  • Re: ASPNET user writing to a subfolder
    ... The NETWORK SERVICE identity has also been confusing me. ... > ASP.NET runs as ASPNET on pre-windows 2003 and NETWORK SERVICE user on> windows 2003 by default. ... When IIS is in anonymous mode, ASP.NET app runs as ASPNET(or NETWORK ...
    (microsoft.public.dotnet.framework.aspnet)
  • Network permissions for w3wp.exe?
    ... I have an ASP.NET app that is running on a W2k3 DC. ... The app needs to access ... Pool is running under the "Network Service" profile. ...
    (microsoft.public.dotnet.framework.aspnet)
  • ASP --> OLEDB --> Access db ?
    ... Since I am dealing w/ an ISP hosting my app, it's not easy to call them and ask them to add rw perms on my virtual directory. ...
    (microsoft.public.inetserver.asp.db)