Access Denied ASP.NET 1.1.4322...

[Martin]

Hi,

I am getting an "Access Denied" error when attempting to browse asp.net
pages.

I have installed ASP.NET 1.1.4322 on a domain controller.
The machine also has ASP.NET 1.0.3705 installed on it.
The machine is win 2k server. IIS is installed.

I have already run aspnet_regiis - i to reinstall the .net framework.
I have set IIS to run under a domain account. (and this works cause classic
asp pages are working)

I found the following article
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q315158
that talks about running asp.net on a domain controller, but it says that
there is only an issue with v1.0.3705 and it is fixed in v1.1.4322.

never the less I changed the <processModel> to run under a domain account
but still this doesn't work.

I still get an access denied error.
The aspx that I am attempting to view only has plain text in it and the NTFS
and security permissions on the directory (and also the file) are full
controll for everyone.

can naybody please help me out or tell me where I am going wrong.

many thanks in advance.

cheers

martin.

 

[Juan T. Llibre]

Does the virtual directory have
script execution rights assigned ?

Open the MMC and check the
virtual directory's script execution permissions.

 

[Martin]

Hi,

My site is actally at the root of a site (not in its own virtual dir)
By "script execution rights" i assume that you mean go to propertys of site,
then "Home directory" tab and check box that says "Script Source Access"

This is aleady ticked.
Classic ASP page run fine on this site.
The error that I am getting is an asp.net error indicating that I have been
denied access to a resource. All Share and security settings are set to
"Full Control" for everyone.

cheers

martin.

 

[Juan T. Llibre]

re:

By "script execution rights" i assume that you mean go to propertys of
site, then "Home directory" tab and check box that says "Script Source
Access"

No. I mean the "Execute Permissions" box with dropdown
right under the Application's name.

The choices are : None, Scripts Only
and Scripts and Executables.

You should have "Scripts Only" selected.

btw, I noticed you changed the <processModel>
to run under a domain account.

Did you also give write permissions to that account for
\WINNT\Microsoft.NET\Framework\V1.1.4322\Temporary ASP.NET Files\
for compiler use, and, also the \WINNT\TEMP\ directory if
you are going to be running Web Services ?

btw, running ASP.NET on a Domain Controller is
not considered an example of best security practices.

Look through this document for a detailed explanation
of the process you need to go through to downsize the risks :

"Running ASP.NET on a Domain Controller"
http://msdn.microsoft.com/library/d...e2k3/e2k3/_exch2k_running_asp_net_on_a_dc.asp

 

[Martin]

Hi,

Thanks for the reply, however niether of the things you suggested worked.
I still get the following error

Error message 401.3: You do not have permission to view this directory or
page using the credentials you supplied (access denied due to ACLs). Ask the
Web server's administrator to give you access to
'C:\Inetpub\wwwroot\wwwCCLRAssistTitan\martin.aspx'.

But I have changed the ACL's so that theaccount has permission to this
directory.
Everyone has permission to this dir and asp.net tempory files.

I will have a look through the article that you suggested.

cheers

martin.