Previous Next

Thread: Adding sites to DFS share gives permissions issue

Last post 10-02-2008 5:31 AM by WenJun Zhang - MSFT. 3 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (4 items)

Sort Posts:

  • 09-25-2008, 4:25 PM

    • Gareth D
    • Not Ranked
    • Joined on 06-20-2006, 11:24 PM
    • Posts 5

    Adding sites to DFS share gives permissions issue

    Hello Every one. I am setting up a test enviroment to setup and make sure our webapps work correctly in a web farm situation before we upgrade our servers. I have two machines running server 2008, they are both domain controllers. I have set up DFS to host the IIS shared configuration which works perfectly. I have also set up another synced folder to host the websites. I can add the website fine however if I go to basic settings for the site then click on "Test Settings" i get the following. (green tick) Authentication: pass-through authentication (test1:Network Service): the application pool identity is valid (yellow explanation mark) Authorisation: Cannot verify access to path (\\server\share\websites) And the explanation it gives is: The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that \$ has Read access to the physical path. Then test these settings again. I have given the computers full access, ive even given "everyone" full access just to see what happens but I always get that error. I cant seem to find any where on the net with instructions on resolving this, has anyone had the same issue?
  • 09-25-2008, 4:50 PM In reply to

    • Gareth D
    • Not Ranked
    • Joined on 06-20-2006, 11:24 PM
    • Posts 5

    Re: Adding sites to DFS share gives permissions issue

    if I change the application pool to run as administrator its fine. However I obviously wouldnt want to do this
  • 09-25-2008, 6:35 PM In reply to

    • Gareth D
    • Not Ranked
    • Joined on 06-20-2006, 11:24 PM
    • Posts 5

    Re: Adding sites to DFS share gives permissions issue

    Here are the permissions on the DFS share and the local folder DFS share poermissions: webserver1$ = full webserver2$ = full network service = full administrators = full c:\dfsroots\share\websites permissions: network service = read,list,execute webserver1$ = full webserver2$ = full system = full this form seems to be anoying its removing my character returns in my posts
  • 10-02-2008, 5:31 AM In reply to

    Re: Adding sites to DFS share gives permissions issue

    The warning can be safely ignored. It simply indicates IIS UI has no way of impersonating the built-in account (NetworkService) that is configured for the app-pool identity, so it cannot verify whether that identity has access. The warning message is just in order to notify users that IIS UI cannot verify the permissions for you, so need to verify them using other means - if you already know that permissions are ok, you can ignore this warning. Thanks.

    WenJun Zhang - MSFT
    Sincerely
    Microsoft Online Community Support

    “Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
Page 1 of 1 (4 items)
Page view counter