I have a Windows 2003 Sever that I have had running fine several .NET
websites for over a year now.
Two weeks ago I decided to change my anonymous FTP site access from
'granted' and denied' IP addresses to 'not anonymous’ and require username
password access. I created an ‘FTPGuest’ user account and gave it the file
permissions I
wanted. Tested the FTP site access and it works fine from within the LAN
and/or from outside the WAN.
However, now when I attempt to access my website I receive an IE webpage
that ONLY SAYS “Access is denied.â€, and nothing else. I see no error or
information in the Event logs. I spent most of the afternoon playing with
Permissions, User Accounts and Directory Security settings, but nothing has
helped.
Chris
[quoted text, click to view] "Ken Schaefer" wrote:
> Well, it seems that Local Service has access to something that Network
> Service does not.
>
> What exactly are you getting an Access Denied on? What is the exact error
> message?
>
> Cheers
> Ken
>
> "mangia" <mangia@discussions.microsoft.com> wrote in message
> news:21556E9A-50EE-4816-BF8E-8FBCB0332123@microsoft.com...
> >I have been struggling with my ASP.NET (V1.1 sp1) websites getting an
> >'Access
> > Denied' message.
> >
> > I have track down the problem (I think) to the IIS Connection Pools. Most
> > MS Info suggests keeping the 'Identity' set as 'Network Service' to
> > provide
> > greater security.
> >
> > However, I have found that if I change the Identity to 'Local Service' my
> > websites now work! What am I missing? Why does setying connection pool
> > 'Identity' set as 'Network Service' cause an 'Access Denied' message?
> >
> > Thanks for your help!
>
>
If you are seeing nothing other than "Access is denied", then I don't think
you are seeing an error direct from IIS - do you have a proxy server in the
way that might be "interpreting" a message returned from IIS?
What do you see in the IIS Logfiles for the requests in question? Eg what is
the HTTP status and substatus?
Cheers
Ken
[quoted text, click to view] "mangia" <mangia@discussions.microsoft.com> wrote in message
news:A37CD2B9-245B-4219-A6B2-F5B77FD18A1A@microsoft.com...
>I have a Windows 2003 Sever that I have had running fine several .NET
> websites for over a year now.
>
> Two weeks ago I decided to change my anonymous FTP site access from
> 'granted' and denied' IP addresses to 'not anonymous' and require username
> password access. I created an 'FTPGuest' user account and gave it the
> file
> permissions I
> wanted. Tested the FTP site access and it works fine from within the LAN
> and/or from outside the WAN.
>
> However, now when I attempt to access my website I receive an IE webpage
> that ONLY SAYS "Access is denied.", and nothing else. I see no error or
> information in the Event logs. I spent most of the afternoon playing with
> Permissions, User Accounts and Directory Security settings, but nothing
> has
> helped.
>
> Chris
>
> "Ken Schaefer" wrote:
>
>> Well, it seems that Local Service has access to something that Network
>> Service does not.
>>
>> What exactly are you getting an Access Denied on? What is the exact error
>> message?
>>
>> Cheers
>> Ken
>>
>> "mangia" <mangia@discussions.microsoft.com> wrote in message
>> news:21556E9A-50EE-4816-BF8E-8FBCB0332123@microsoft.com...
>> >I have been struggling with my ASP.NET (V1.1 sp1) websites getting an
>> >'Access
>> > Denied' message.
>> >
>> > I have track down the problem (I think) to the IIS Connection Pools.
>> > Most
>> > MS Info suggests keeping the 'Identity' set as 'Network Service' to
>> > provide
>> > greater security.
>> >
>> > However, I have found that if I change the Identity to 'Local Service'
>> > my
>> > websites now work! What am I missing? Why does setying connection
>> > pool
>> > 'Identity' set as 'Network Service' cause an 'Access Denied' message?
>> >
>> > Thanks for your help!
>>
>>
>>
