IIS 7 & IIS 8
Configuration & Scripting
Cannot verfy access to path
Last post Mar 01, 2013 02:24 PM by javiersanchezmza
Mar 05, 2008 10:47 AM|LINK
I have a problem with acess to my site, i add Network Service to wwwroot and give network service access to read, But not working!?
The message: The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity
has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.
I don't understan what is wrong?!
I'm newbe on IIS7, i know my website work, ihave runnit on IIS 6.0 and working fine!
Thanks for help!
Mar 05, 2008 11:19 AM|LINK
Make sure the computer name Server$ has permissions on the remote path. When a computer is added to an active directory domain, it's account is name MachineName$ (with a dollar sign at the end of it). You can use Windows Explorer to grant Share and NTFS
permissions on your physical folder. When the network services accesses a remote resource, it uses the machine account as the actual account. Hope that helps.
Windows Server MVP - IIS
Log archival solution
Install, Configure, Forget
Mar 05, 2008 07:45 PM|LINK
Ok, thanks! I hope this work! if this not working can i fix this on another way?
Because i have not Active Diretory install on this network i have my webserver on.
Mar 07, 2008 09:08 AM|LINK
In that case, you'll probably need to look at using a local user account on each system with the same name and password. When you connect from ServerA to ServerB, which based your description are in a workgroup , having the same user id and password will
help get over authentication issues between machines.
Another option would be to look at NULL sessions, which in itself is a security risk. Here is more information on NULL sessions.
I would recommend going the route of using local accounts with the same password.
Mar 07, 2008 09:10 AM|LINK
One additional thing that can help identify errors is Process Monitor. Running this on both machines when accessing is invaluable. I didn't mention that before.
Oct 09, 2008 04:58 PM|LINK
I'm having the identical problem, on a newly configured Exchange 2007 server, Windows 2008 (64 bit) with OWA.
Maybe I'm dense, but I'm having trouble with the idea that a computer account needs to be given permissions on a folder on its own drive?
Anyhow, I did it, gave <domain>\<servername>$ read permissions to the folder, and rebooted the server, and am continuing to get the identical problem.
I'm really missing IIS 6
Oct 10, 2008 12:07 PM|LINK
The idea of granting a machine account access is to a remote UNC share, not local to itself. Have you checked over at
http://msexchange.org forums to see if anyone else has seen this issue? I'm not familar with Exchange 2007 on w2k8.
Feb 17, 2009 03:34 PM|LINK
Has anyone run across this error and found a resolution to it? I am having the same thing happen to me. Exchange 2007 on Server 2008 (64bit)
Feb 18, 2009 01:07 PM|LINK
Mar 24, 2009 01:01 AM|LINK
Does anyone have a solution for this? In my case there is no remote resource and the app pool's Process Model Identity is simply 'Local Service'. I've given 'Local Service' Read access to the web application's folder. It keeps spitting back the same error:
"The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read
access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again."