Re: Virtual Directory - Permission Denied with fso CopyFile

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 11/17/04 

Date: Wed, 17 Nov 2004 04:13:59 -0800

Make sure the UNC share allows Read/Write permissions to the user in
question, in ADDITION to the NTFS ACLs. UNC Share ACLs is "Read"-only by
default.

Suggested simplified Filesharing model uses:
UNC Share -- Everyone Full Control
NTFS -- actual file ACLs

This removes the UNC Share permissions from the picture, so you just need to
match impersonated identity to filesystem ACL to calculate effective
permissions. I have no idea what tabs you are looking at, but the only ones
that matter for UNC-based content are:
1. Identity in IIS. You control this by choosing Authentication Type
2. UNC Share -- right-click properties on the UNC server's share itself and
set it to Everyone:F so that you can ignore it
3. NTFS ACLs -- right click on the folder/file on the remote server and set
permissions appropriately

Very straight forward -- it's always worked like this since beginning of NT. 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Bill" <Bill@discussions.microsoft.com> wrote in message
news:4DCA0AB5-C2D6-46F8-A5D4-594C55ED9837@microsoft.com...
I am having this same problem.  I can "read" from the vdir, but I cannot
write to it or create folders.  I made accounts on the UNC server for
IUSR_computername and IWAM_computername and made sure to sync their
passwords.
After reading through the suggested steps here and Barry's solution I tried
created an unrelated 3rd account on both systems with synchronized
passwords.
 I also deleted and recreated the vdir with the new account.  No luck.
Read=good, write/modify=bad.  In reading a M$ q-article I tried setting the
account in the directory security tab (of IIS props on vdir) to the account.
Still; no luck.
Any other suggestions?
B
"Barry" wrote:
> I have 2 servers running win2k, one is a web server and the other is going
> to be an archive server.  The process would be that a user generates a pdf
> report, and then they would choose to archive the report in which the file
> would then be copied to the archive directory.
>
> Both servers are running win2k which is currently my test servers and my
> live servers will be win2k3.  I've setup the archive directory for sharing
> and given everyone all permissions except full control.  I've setup the
> virtual directory within my site using \\<ip>\archive, where the connect
as
> has been setup using my username/password (I'm a domain admin, this is too
> wide open, but I'm just trying to get it to work for now).  The site is
> using anonymous access.  I've even given the archive directory anonymous,
> everyone and iusr_machinename sharing and security permission for all
> permissions except full control.
>
> The problem that I'm running into is when a user selects save, I create a
> FileSystemObject and use the CopyFile function to which I get a permission
> denied error.
>
> Any ideas?
>
> Thanks,
> Barry
>
>
>

Relevant Pages

  • Re: ASP_WP - driving me mad!!!
    ... It *is* easy -- your customer seems to have futzed with ACLs on their web ... server to make your life difficult. ... I have ensured that my permissions are set correctly. ...
    (microsoft.public.inetserver.iis)
  • RE: VBS Script Execution Fails with Permission Denied
    ... Sounds though there might be a permissions issue on or around the FSO ... adding these user/groups to the ACLs for the resource etc. Try using Filemon ... question and get them to monitor reg/file access while running the script. ... > Server Specs ...
    (microsoft.public.scripting.vbscript)
  • Re: Virtual Directory - Permission Denied with fso CopyFile
    ... The fso.CopyFile is server side. ... > CopyFile does not have permissions on the named remote resource. ... What are the ACLs of the Filesystem namespace mapped to the UNC share ...
    (microsoft.public.inetserver.iis)
  • Re: Can IIS use UNC? If so how?
    ... How do you tell what account the app is using so I ... Let me add I am using IIS6 on W2K3 Server. ... If I understand you correctly the unc path would require permissions to the acoount used ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Can IIS use UNC? If so how?
    ... Let me add I am using IIS6 on W2K3 Server. ... If I understand you correctly the unc path would require permissions to the acoount used ... I'm not sure what other account I could give permissions to to make it work. ...
    (microsoft.public.dotnet.framework.aspnet)