RE: [aus-dotnet] ASP.NET on DC permissions


    [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
    • From: Paul Glavich
    • Subject: RE: [aus-dotnet] ASP.NET on DC permissions
    • Date: Tue, 05 Jul 2005 09:48:26 +1000

    I have only checked this thread recently so apologies if this has already
    been discussed or I am somewhat misinformed, but I didn't see any mention of
    OS type (I didn't search back too far though ;-). If you changed the
    identity in the machine.config, and it's a Win2k3 machine, then it wont be
    honoured and instead use the App pool identity, so you might be accessing
    the DB under a different user than expected.
    
    - Paul Glavich
    
    
    -----Original Message-----
    From: dotnet-owner@xxxxxxxxxxx [mailto:dotnet-owner@xxxxxxxxxxx] On Behalf
    Of Scott Baldwin
    Sent: Tuesday, 5 July 2005 9:07 AM
    To: dotnet@xxxxxxxxxxx
    Subject: Re: [aus-dotnet] ASP.NET on DC permissions
    
    I've seen this problem before, in my case I believe that what Matthew
    suggested was what finally fixed it for me.
    
    Scott Baldwin
    Readify - Senior Developer
    
    On 7/5/05, Shea Strickland <Shea.Strickland@xxxxxxxxxxxxxxxxxx> wrote:
    > 
    > 
    > Morning All,
    > 
    >  
    > 
    > Just a little something from left field but it might help nonetheless 
    > =D
    > 
    >  
    > 
    > Check your event log for any account login failures or errors related 
    > to services not starting. We had a problem a while back after putting 
    > on the .Net framework SP1. It changed the IWAM_machinename password 
    > and didn't inform us. We had to synchronise the password in a few 
    > places "IIS Out of Process" identity, "IWAM_machinename" account and 
    > "IIS" from memory. There was a little script in the 
    > c:\inetpub\adminscripts\synciwam.vbs that we used to help synchronise.
    > 
    >  
    > 
    > How are you connecting to the MDB, are you using OLEDB or ODBC?
    > 
    >  
    > 
    > Cheers
    > 
    > Shea Strickland
    > 
    >  
    > 
    > -----Original Message-----
    > From: dotnet-owner@xxxxxxxxxxx [mailto:dotnet-owner@xxxxxxxxxxx] On 
    > Behalf Of Greg Keogh
    > Sent: Monday, 4 July 2005 7:16 PM
    > To: dotnet@xxxxxxxxxxx
    > Subject: [aus-dotnet] ASP.NET on DC permissions
    > 
    >  
    > 
    > 
    > This is a follow-up on a post I made last week about getting ASP.NET
    > 
    > apps working on a domain controller.
    > 
    >  
    > 
    > We just placed our ASP.NET app on a Small Business Server PC, created 
    > a
    > 
    > web site, host headers, etc. To urgently overcome any security 
    > problems
    > 
    > we simply set machine.config to have:
    > 
    >  
    > 
    > userName="SYSTEM" password="AutoGenerate"
    > 
    >  
    > 
    > We couldn't waste time up-front, so we used this non-recommended
    > 
    > overkill setting.
    > 
    >  
    > 
    > Sadly, it doesn't work! I've double-checked everything, but an attempt
    > 
    > by the app to write to an MDB file keeps dying with "Use an updateable
    > 
    > query". I know that SYSTEM has full control and the file is writeable.
    > 
    >  
    > 
    > Can anyone think of some other spanner in the cogs that I've forgotten
    > 
    > about?
    > 
    >  
    > 
    > Thanks
    > 
    > Greg Keogh
    > 
    >  
    > 
    >  
    > 
    > ---
    > 
    > [This E-mail scanned for viruses by Declude]
    > 
    >  
    > 
    > _________________
    > 
    > You are a part of the Australian "dotnet" mailing list.
    > 
    > To unsubscribe send "unsubscribe dotnet" or to re-subscribe send 
    > "subscribe dotnet Your Name" in the body of the email to: 
    > imailsrv@xxxxxxxxxxx
    > 
    > List managed by: http://www.stanski.com
    ---
    [This E-mail scanned for viruses by Declude]
    
    _________________
    You are a part of the Australian "dotnet" mailing list.
    To unsubscribe send "unsubscribe dotnet" or to re-subscribe send "subscribe
    dotnet Your Name" in the body of the email to: imailsrv@xxxxxxxxxxx List
    managed by: http://www.stanski.com
    
    
    ---
    [This E-mail scanned for viruses by Declude]
    
    _________________
    You are a part of the Australian "dotnet" mailing list.
    To unsubscribe send "unsubscribe dotnet" or to re-subscribe send "subscribe dotnet Your Name" in the body of the email to: imailsrv@xxxxxxxxxxx
    List managed by: http://www.stanski.com
    
    



    (Click here for more information on the aus-dotnet mailling list)