IIS7 - General

Re: Read permission settings

kateroh — Mon, 13 Jul 2009 17:45:49 GMT

The feature is editable through either Windows explorer or IIS Manager:
1. Either navigate to the physical path of your website or on your website right-click and choose "Explore" from the context menu. Then, right-click on the folder and choose "Properties"
2. Or in IIS Manager, directly choose "Edit Permissions" either through the Actions task pane to the left pr through the context menu when you right-click on your website.

Re: Read permission settings

richiebabes99 — Mon, 13 Jul 2009 15:46:06 GMT

But there's no Properties menu item in IIS 7!!!!

Re: Read permission settings

kateroh — Fri, 10 Jul 2009 21:30:04 GMT

ACL = access control list, which defines permissions on a file system object (file or folder) for users and groups. Thus, if you need read/write permissions on the site folder for your app pool identity, you can right-click on the folder, go to Properties-->Security and see if the app pool user identity has the necessary permissions on that physical path.

Re: Read permission settings

richiebabes99 — Fri, 10 Jul 2009 13:09:40 GMT

Thanks, still a bit confused. What does this mean - "1. Once you know the identity of your app pool, check ACLs for that identity on the physical path"? What is an ACL and how do I check them for my app pool on the physical path?

Re: Read permission settings

kateroh — Fri, 10 Jul 2009 07:42:32 GMT

1. Once you know the identity of your app pool, check ACLs for that identity on the physical path
2. Right-click on Computer and select Properties. You will be able to see whether the machine is a part of a domain or workgroup.
3. In InetMgr, go to Application Pools, right-click on the app pool and select Advanced Settings. In the dialog, find what identity is set for the app pool
4. Again, check ACLs on the physical path for the domain account

Read permission settings

richiebabes99 — Thu, 09 Jul 2009 20:11:34 GMT

When testing my virtual directory I get the following authentication error:

"The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again."

How do I:

1. Make sure that the application pool identity has Read access to the physical path?

2. Determine if this server is joined to a domain?

3. Determine if the application pool identity is NetworkService or LocalSystem?

4. Verify that <domain>\<computer_name>$ has Read access to the physical path?