Groups | Blog | Home
all groups > iis security > march 2005 >

iis security : Adobd errors Permission denied IIS6


Bernard
3/23/2005 12:00:00 AM
what's the full error msgs ?
does the app need additional permissions ?
by default, app pool identity is using network service, do you need to grant
permission to this account ?

find out what permission the app need, then grant permissions to the user
account accordingly.

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Infodon
3/23/2005 12:47:04 PM
Ok here is the situation we have recently upgraded our 2000 server to 2003.
We have several Virtual directories that authenticate anonymously, everything
was working fine on the 2000 server. Now we experience errors when loading
asp pages pointing to either mdb or sql, unless I perform the workaround
below. I haave looked at Subauthentication and nothing seems to work.

Current workaround I have to go into one of the virual directories and
switch from anonymous to IWA login using IE as administrator, Page loads
fine. I then go back and switch to AA and things work for a while and then
back to error
--
Bernard
3/24/2005 12:00:00 AM
Now, try this
http://www.eventid.net/display.asp?eventid=2266&eventno=3057&source=W3SVC-WP&phase=1

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Infodon
3/24/2005 8:13:02 AM
Basically the ASP pages error out with the adobd.connection error permission
denied similar on the ASP pointing to SQL pages. I have reverted back to IIS5
compatiblity mode because the problem doesn't seem to occur. I would prefer
to go to App pools but none of the identities seem to work even if granted
full permissions in NTFS. I tried Local System, local service and network
service. I did not try a specific identity. What is interesting is switching
from IWA login as admin and switch back to anonymous works for a while? That
one is a real head scratcher for me...

Do you have any information about migrating from compatibilty mode to worker
process. I noticed that there were some errors in the event log related to
the worker process.

Event ID 2266

The account that the current worker process does not have the SeTCBPrivilege
privilege, the anonymous passworrd sync and digest authenication are disabled.

I cannot find anything out about how or where to grant the appropriate
privileges, ...



[quoted text, click to view]
AddThis Social Bookmark Button