Re: webservice permissions

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Ken Schaefer (kenREMOVE_at_THISadopenstatic.com)
Date: 02/05/05 

Date: Sat, 5 Feb 2005 15:01:31 +1100

a) IUSR_<machinename> is a *local* account. You can't assign it permissions
to remote resources

b) If this is a .NET app, then your code probably isn't running under
IUSR_<machinename> anyway, but rather the process identity for the worker
process (w3wp.exe) that's services your web app

c) If you want to use a custom account for a web app pool identity, then
place that account into the IIS_WPG group on the IIS server (at the very
least), so that it has the necessary permissions to run. If that still
doesn't work, consult this KB article here, to see if anything else is
missing: http://support.microsoft.com/?kbid=812614

Hope that helps

Cheers
Ken

"Daniel Wilson" <d.wilson@embtrak.com> wrote in message
news:ewiGJcvCFHA.2032@tk2msftngp13.phx.gbl...
>I have a client who is trying to deploy a webservice I wrote. The web
> service reads a file on a file server and delivers information about it.
> The
> file needs to be inaccessible to the user of the webservice because it is
> intellectual property.
>
> This sounds easy. Just give the IUsr account on the web server, a 2003
> server running IIS6, read rights to the files on the file server. Since no
> HTTP path will get to the file server, the user can't steal the file.
>
> Unfortunately, the service returns the error
> Access to the path "\\FS1\Share\Designs\" is denied.
>
> The Everyone group has rights to the share as well as the Designs folder.
> But this happens.
>
> I suggested running the virtual directory under which the web service ran
> under a domain account, not the local IUSR. The client reported that the
> webservice page would not load at all under that configuration.
>
> What are we doing wrong?
>
> Thanks.
>
>
> --
> Daniel Wilson
> Senior Software Solutions Developer
> Embtrak Development Team
> http://www.Embtrak.com
> DVBrown Company
>
>
>
>

Relevant Pages

  • Re: HELP please - I think this is a permissions problem - ASP.Net application
    ... Have you checked the permissions for the file itself? ... Ur I.T. Mate Group ... > Trying to run this app. ... > - Windows Media Services Guest Account ...
    (microsoft.public.inetserver.iis)
  • Re: webservice permissions
    ... IUSR_is a *local* account. ... If this is a .NET app, then your code probably isn't running under ... so that it has the necessary permissions to run. ... > service reads a file on a file server and delivers information about it. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Impersonate in 2.0 Winforms
    ... the host has to make filecopy..to a file server, ... run under an account which has read privs for hte fileserver. ... thus granting permissions for the windowsService account isn't ... permissions on the folders and files of thousands and thousands of files. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Crystal Reports .NET: Exporting to PDF
    ... The trick was that while I was setting the NTFS permissions on the ... to run the ASP.NET app on the web server. ... run underdifferent user account, local or domain. ... the webserver), but to be perfectly clear, yes, I'm trying to save ...
    (microsoft.public.vsnet.general)
  • Re: FileStream errors attempting to open file on Shared Drive
    ... the network service account is a local account, ... Code lives inside a .NET web app and looks like this: ... I understand it's a permissions problem. ... > and set the same permissions for user "NETWORK SERVICE". ...
    (microsoft.public.dotnet.framework.aspnet)