Groups | Blog | Home
all groups > iis security > january 2004 >

iis security : FileSystemObject and networked drives


Mark
1/30/2004 12:00:45 AM
Hi - I am using the FileSystemObject to upload files to a directory on
my web server. The directory has full permissions for the IUSR account.

Problem is, I now need to store the documents on a network drive (eg.
p:\\files\) - and when I try and do this, I get the message 'Path Not
Found'.

I presume this is because the web server is not 'logged in' and
therefore does not recognise p:\\ as a drive - so my question is, is
there any way of getting the web server to recognise p:\\ - and also,
what permissions do I need to set on the p:\\ drive to allow the IUSR on
my web server to write files to it?

Thank you for any help,

*** Sent via Developersdex http://www.developersdex.com ***
Ken Schaefer
1/31/2004 12:45:26 AM
Hi,

You have two problems:
a) drive letters are mapped for the "logged on user" user only. So if you
logon an map p: to \\server\share, then it's visiable only to you - not to,
say, the IUSR_<machinename> account. To get around this use \\server\share
syntax instead (known as a UNC path)

b) the IUSR_<machinename> account is local to the webserver, and can't be
assigned resources on remote devices (unless you're running IIS on a domain
controller). You can create an account called "IUSR_<webservername>" on the
file server, and give it the same password as the IUSR on the webserver
-or-
(this is probably best), change the IUSR_<machinename> account on the
webserver to be a low-privelage domain account. Domain accounts can be
assigned access to any resource in the domain.

Cheers
Ken

[quoted text, click to view]
: Hi - I am using the FileSystemObject to upload files to a directory on
: my web server. The directory has full permissions for the IUSR account.
:
: Problem is, I now need to store the documents on a network drive (eg.
: p:\\files\) - and when I try and do this, I get the message 'Path Not
: Found'.
:
: I presume this is because the web server is not 'logged in' and
: therefore does not recognise p:\\ as a drive - so my question is, is
: there any way of getting the web server to recognise p:\\ - and also,
: what permissions do I need to set on the p:\\ drive to allow the IUSR on
: my web server to write files to it?
:
: Thank you for any help,
:
: *** Sent via Developersdex http://www.developersdex.com ***
: Don't just participate in USENET...get rewarded for it!

AddThis Social Bookmark Button