« Previous Next »

Thread: Read permission settings

Last post 07-13-2009 1:45 PM by kateroh. 5 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (6 items)

Sort Posts:

  • 07-09-2009, 4:11 PM

    Read permission settings

    When testing my virtual directory I get the following authentication error:

    "The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again."

    How do I:

    1.  Make sure that the application pool identity has Read access to the physical path?

    2.  Determine if this server is joined to a domain?

    3.  Determine if the application pool identity is NetworkService or LocalSystem?

    4.  Verify that <domain>\<computer_name>$ has Read access to the physical path?

  • 07-10-2009, 3:42 AM In reply to

    Re: Read permission settings

    1. Once you know the identity of your app pool, check ACLs for that identity on the physical path
    2. Right-click on Computer and select Properties. You will be able to see whether the machine is a part of a domain or workgroup.
    3. In InetMgr, go to Application Pools, right-click on the app pool and select Advanced Settings. In the dialog, find what identity is set for the app pool
    4. Again, check ACLs on the physical path for the domain account

    Thanks,
    Katerina Rohonyan, SDET, Microsoft IIS Team
  • 07-10-2009, 9:09 AM In reply to

    Re: Read permission settings

    Thanks, still a bit confused. What does this mean - "1. Once you know the identity of your app pool, check ACLs for that identity on the physical path"? What is an ACL and how do I check them for my app pool on the physical path?

  • 07-10-2009, 5:30 PM In reply to

    Re: Read permission settings

    ACL = access control list, which defines permissions on a file system object (file or folder) for users and groups. Thus, if you need read/write permissions on the site folder for your app pool identity, you can right-click on the folder, go to Properties-->Security and see if the app pool user identity has the necessary permissions on that physical path.

    Thanks,
    Katerina Rohonyan, SDET, Microsoft IIS Team
  • 07-13-2009, 11:46 AM In reply to

    Re: Read permission settings

    But there's no Properties menu item in IIS 7!!!!

  • 07-13-2009, 1:45 PM In reply to

    Re: Read permission settings

    The feature is editable through either Windows explorer or IIS Manager:
    1. Either navigate to the physical path of your website or on your website right-click and choose "Explore" from the context menu. Then, right-click on the folder and choose "Properties"
    2. Or in IIS Manager, directly choose "Edit Permissions" either through the Actions task pane to the left pr through the context menu when you right-click on your website.

    Thanks,
    Katerina Rohonyan, SDET, Microsoft IIS Team
Page 1 of 1 (6 items)