« Previous Next »

Thread: Component Services & IIS Permissions

Last post 12-22-2008 5:08 AM by jimbo_jnr. 6 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (7 items)

Sort Posts:

  • 12-17-2008, 1:18 PM

    Component Services & IIS Permissions

    Hello,

    I have an IIS6.0, Classic ASP application that is having some difficulties as I do not understand about permission/access rights etc. I have created a COM+, Components Service Application from a dll. This component needs to be accessible to the IIS user.

    How do I set this up? Does anyone know what the identity should be for the Component and for the application pool?

    The site is running fine for me whilst on the server but is giving access right errors to others on the network trying to access it (the components). If I register the dlls through regsvr32 the site runs fine but this is not ideal.

    At the moment my identity for the component is:

    Inter Active Account- The current Logged on user

    The security account for the application pool is set to:

    Predefined: Network Service

    Any help appreciated.

    Thanks,

    Jim

  • 12-18-2008, 9:19 AM In reply to

    • tomkmvp
    • Top 10 Contributor
    • Joined on 03-20-2003, 6:27 AM
    • Central NJ
    • Posts 6,160
    • IIS MVPs

    Re: Component Services & IIS Permissions

    What does the component do?  What is different about the other users?

  • 12-18-2008, 10:33 AM In reply to

    Re: Component Services & IIS Permissions

    Hi Tom,

    The Component is used for database connectivity and executing all of the applications DB interaction. I do not know what is different about the other users except that they are accessing the site from network computers and I am accessing directly from the server whilst being logged in with an admin account.

    This is a strange problem as the other users are claiming that they now can access the site 99% of the time but receive '8000401a' type errors intermittently. Any time they have reported the error I have logged into the server and the site becomes available to them again without doing anything!

    We are leaving an administrator account logged into the server at all times now to see if that stops the intermittent access problems but this is a strange resolution if it works and is not a long term solution.

    Could it be that a non administrator is logging into the server at times and the Inter Active Account- The current Logged on user  identity of the component is not being made accessible as a result?

    Thanks

  • 12-18-2008, 11:00 AM In reply to

    Re: Component Services & IIS Permissions

    Can't you check to see the login activety at the time if you suspect it is that.

    But why are you using current user logged on? That is not best practice - use a separate account for this an account no-one uses and never logs in directly to the machine.

    Is the COM stuff on the same physical machine as the web frontends or is it tiered?

    I would look for any other activity at that time. See what is occurring everything from network traffic and high loads and firewalls. It is likely to be linked to something else.

  • 12-18-2008, 2:32 PM In reply to

    • tomkmvp
    • Top 10 Contributor
    • Joined on 03-20-2003, 6:27 AM
    • Central NJ
    • Posts 6,160
    • IIS MVPs

    Re: Component Services & IIS Permissions

    I would suggest creating a "service account" for use by the component and making sure that service account has rights ot the database.

  • 12-18-2008, 3:07 PM In reply to

    Re: Component Services & IIS Permissions

    Hi,

    Does the application work at all if you are actually logged on to the web server with a sufficiently privileged account ?

    If so then it could possibly be this :

    COM+ server application that uses interactive user identity fails to load

    Regards, 

    Paul Lynch | www.iisadmin.co.uk
  • 12-22-2008, 5:08 AM In reply to

    Re: Component Services & IIS Permissions

    Hi,

    It appears that this is indeed the case. The Components seem to be only accessable when an administrator is logged into the server.

    Unfortunately I have been asked not to make any further changes to the system until the new year so I cannot play around with the components identity settings or create a new user account.

    I will update this post when I have made the changes.

    Thanks & Regards,

    Jim

Page 1 of 1 (7 items)
Microsoft Communities