« Previous Next »

Thread: Cannot get IIS pickup directory. NEED HELP

Last post 10-20-2009 11:08 AM by artisticcheese. 23 replies.

Average Rating Rate It (5)

RSS

Page 2 of 2 (24 items) < Previous 1 2

Sort Posts:

  • 10-10-2006, 8:54 AM In reply to

    Re: Cannot get IIS pickup directory. NEED HELP

    Figured it out!!! Sort of...

    I am using HELM control panel which when you create a domain/website it creates users for the application pool to run under.

    For some reason the user it created to run under could not get access to the metabase.

    I did run the aspnet_regiis -ga <the user account in application pool> and it says that it granted permissions to the metabase and other files.  But apparantly not.  Perhaps that command does not work as its description says it does.

    Any ideas on how to add that user to the metabase acl then?  I fixed it by changing it to network service as you guys mentioned has access by default.

    In the code I linked to it is supposed to throw a SecurityException if it hits one so I have NO idea why microsoft's code didn't throw one as opposed to Can not get PickupDirectory

    So for future use and to set this up how I want to.  How would I go about granting privledges to the user properly?

    Thank for you all your time and help!

    -Andy

  • 10-10-2006, 10:49 AM In reply to

    • tomkmvp
    • Top 10 Contributor
    • Joined on 03-20-2003, 10:27 AM
    • Central NJ
    • Posts 6,208
    • IIS MVPs

    Re: Cannot get IIS pickup directory. NEED HELP

  • 10-10-2006, 2:12 PM In reply to

    Re: Cannot get IIS pickup directory. NEED HELP

    True enough,  it would seem that I wan't aware of it either.

    I believe I mentioned I ran the

    aspnet_regiis –ga <WindowsUserAccount>

    that was mentioned in the link you sent.  I ran it on the account that was for app pool for my site.  Wouldn't that grant the neccesary privledges?

    Not sure what I was doing wrong on that part.  But thanks for all the help!
  • 10-10-2006, 2:54 PM In reply to

    • tomkmvp
    • Top 10 Contributor
    • Joined on 03-20-2003, 10:27 AM
    • Central NJ
    • Posts 6,208
    • IIS MVPs

    Re: Cannot get IIS pickup directory. NEED HELP

  • 10-10-2006, 10:50 PM In reply to

    • Bernard
    • Top 50 Contributor
    • Joined on 05-24-2006, 4:30 AM
    • Malaysia
    • Posts 291

    Re: Cannot get IIS pickup directory. NEED HELP

    Interesting... is the new process identity part of IIS_WPG group?

    You can also use metabase explorer to grant permissions.

    Cheers,
    Bernard Cheah
  • 09-16-2008, 1:05 PM In reply to

    • joeller
    • Not Ranked
    • Joined on 04-15-2005, 4:03 AM
    • Posts 1

    Re: Cannot get IIS pickup directory. NEED HELP

    I have the same issue.  How do I user the metabase explorer to grant permissions 

     Someone created an application Pool callled "DotNet20" with an identity of IWAM_<servername>.  The IWAM account did not have permission to the Pickup directory which I gave it.  I ran aspnet_regiis -ga IWAM_<servername>.  I added it to the list of users with permissions to Pickup (fullcontrol).  Checked its membership with the IIS_WPG group of which it is a member.  Still did not work.  I don't want to change the identity of the application role as I figure someone set it that way for a reason. Everyone in these forums keeps saying change the Metabase but no one says how.  I never even heard of the Metabase until I started researching this error message, so I am not acquainted with the means of updating it. 

     I tried downloading Metabase.exe, but it turns out to be a zip of a vbs file which is run from the command line using known parameters, which are not know to me.

  • 05-05-2009, 4:38 PM In reply to

    • sqls
    • Not Ranked
    • Joined on 05-05-2009, 8:30 PM
    • Posts 1

    Re: Cannot get IIS pickup directory. NEED HELP

    I know this topic is a bit old but..

     I had the same problems as described by the original poster.  I found that the folder pemissions on the pickup folder were not the problem and that the aspnet_regiis command did not solve the problem.

     I opened the metadata using the Metadata Explorer and saw that the aspnet_regiis command did set permissions on the highest level tree item.  But I saw that those permissions were not being proprogated to the lower level tree items.  I manually gave permission to my Account Pool user to the LM, LM\Smtpsrv\ and LM\Smtpsrv\1 folders and it solved the problem.

     Looking at the permission settings I do not see a way to tell it to inherit permissions from it's parent.  Then I noticed when trying to view the permissions of some of the folder items it gave an error saying it's permissions were defined by the parent and asked if I wanted to open the parents permissions or copy those permissions and open that tree item.

    To see what would happen I choose copy which was the "No" answer.  It copied them and opened that tree item but now that item was no longer inheriting it's permissions from the parent and there wasn't any option to make it do so.

    It seems pretty possible that someone before me hit the "No" button while opening those trees up and that's what caused the problem.  

    I have yet to find out how to change the tree items to inherit permissions from it's parent again.  I'm sure I'll figure that out eventually.

     Just wanted to write here since this topic helped me find the problem and hopefully this can help someone else solve their problem.

     

    http://sqls.net

  • 05-10-2009, 11:01 PM In reply to

    Re: Cannot get IIS pickup directory. NEED HELP

    Here is an article describing how to set Metabase acls.

    http://support.microsoft.com/kb/326902

    Steve Schofield
    Windows Server MVP - IIS
    http://weblogs.asp.net/steveschofield


    http://www.IISLogs.com
    Log archival solution
    Install, Configure, Forget
  • 10-20-2009, 11:08 AM In reply to

    Issue solved

    Is somebody still experiencing this issue. By default only Network Service/Administrators/Local Service have access to SMTP key in metabase. You need to grant read permission to your account, I just gave "everyone" read in order not to deal with all possible permutations of accounts.

    Also download IIS resource kit and use Metabase Explorer utility to modify permissions, it's much more intuitive then using command line tool mentioned above. After all that's why we chose IIS not Apache.

    Here is screenshot how permissions will look like

    http://drop.io/artisticcheese/asset/capture-png

Page 2 of 2 (24 items) < Previous 1 2
Microsoft Communities