473,569 Members | 2,700 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

ASP.NET Permissions (I think)

Tearing my hair out with this one....

I've got a tiny ASP.NET site which works fine on my development machine.

I put the application onto a Test machine, and I get:

Cannot execute a program. The command being executed was
"c:\winnt\micro soft.net\framew ork\v1.0.3705\c sc.exe" /noconfig

The first line of the trace is:

ExternalExcepti on (0x5): Cannot execute a program....

Now, I'm aware that Win32 error 5 = Access Denied.

To support this, the web server has the IIS Lockdown tool installed. I
de-installed this and the application ran successfully. However, it's
not really an option to leave this off permanently, so I need to get
both working together.

When I reapplied IIS Lockdown, the app stopped working again.

Now, the funnies:

1. The server happily runs other ASP and ASP.NET sites without any
permissions issues, lockdown or not. The other ASP site has exactly the
same config (essentially, High Isolation). Obviously different physical
file location.
2. When I load the pages in IE, neither RegMon nor FileMon show any
Access Denied errors. Or indeed, errors at all.
3. As far as I can see, the ASPNET worker process account has access to
both the source files and csc.exe (and the subfolders under the
framework directory)

Has anyone seen this problem before?
Can anyone think of what else I can do to chase this one down?

TIA,
Pete

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
Nov 18 '05 #1
5 1210
Pete,

Make sure that the ASPNET account is not a member of the "Web Anonymous
Users" and/or the "Web Applications" group. If it is, remove it.

Jim Cheshire, MCSE, MCSD [MSFT]
Developer Support
ASP.NET
ja******@online .microsoft.com

This post is provided as-is with no warranties and confers no rights.

--------------------
From: Pete <an*******@devd ex.com>
X-Newsreader: AspNNTP 1.50 (ActionJackson. com)
Subject: ASP.NET Permissions (I think)
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <uN************ **@tk2msftngp13 .phx.gbl>
Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
Date: Wed, 03 Dec 2003 14:01:09 -0800
NNTP-Posting-Host: actionjackson13 3.dsl.frii.net 216.17.147.133
Lines: 1
Path: cpmsftngxa06.ph x.gbl!cpmsftngx a08.phx.gbl!cpm sftngxa10.phx.g bl!TK2MSFTNGXA0 5
..phx.gbl!TK2MS FTNGP08.phx.gbl !tk2msftngp13.p hx.gblXref: cpmsftngxa06.ph x.gbl microsoft.publi c.dotnet.framew ork.aspnet:1948 74
X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet

Tearing my hair out with this one....

I've got a tiny ASP.NET site which works fine on my development machine.

I put the application onto a Test machine, and I get:

Cannot execute a program. The command being executed was
"c:\winnt\micr osoft.net\frame work\v1.0.3705\ csc.exe" /noconfig

The first line of the trace is:

ExternalExcept ion (0x5): Cannot execute a program....

Now, I'm aware that Win32 error 5 = Access Denied.

To support this, the web server has the IIS Lockdown tool installed. I
de-installed this and the application ran successfully. However, it's
not really an option to leave this off permanently, so I need to get
both working together.

When I reapplied IIS Lockdown, the app stopped working again.

Now, the funnies:

1. The server happily runs other ASP and ASP.NET sites without any
permissions issues, lockdown or not. The other ASP site has exactly the
same config (essentially, High Isolation). Obviously different physical
file location.
2. When I load the pages in IE, neither RegMon nor FileMon show any
Access Denied errors. Or indeed, errors at all.
3. As far as I can see, the ASPNET worker process account has access to
both the source files and csc.exe (and the subfolders under the
framework directory)

Has anyone seen this problem before?
Can anyone think of what else I can do to chase this one down?

TIA,
Pete

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!


Nov 18 '05 #2
Jim,

ASPNET was a member of 2 groups, users and web applications.
I removed it from Web Applications. It makes no difference to the app
(still doesn't run).

Filemon still shows no access denied errors. However I have noticed
something funny on it. There are 4 frames on the site's front page, and
filemon shows the site's global.asax being accessed (read, successfully)
four times. No record of any access to any other file on the site, just
global.asax.

It's almost as if the site files themselves aren't being accessed,
except that (a) filemon should show this, and (b) default.htm, which
contains the frameset, is most definitely being loaded OK.

Presumably the ASP.NET dll will see that an aspx file has been
requested, then attempt to run it against csc? So if it can't run csc
that would explain why it never accesses the aspx file? I'm guessing
here but it seems reasonable.

Any more thoughts?

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
Nov 18 '05 #3
Pete,

Make sure that the ASPNET account is not a member of the "Web Anonymous
Users" and/or the "Web Applications" group. If it is, remove it.

Jim Cheshire, MCSE, MCSD [MSFT]
Developer Support
ASP.NET
ja******@online .microsoft.com

This post is provided as-is with no warranties and confers no rights.

--------------------
From: Pete <an*******@devd ex.com>
X-Newsreader: AspNNTP 1.50 (ActionJackson. com)
Subject: ASP.NET Permissions (I think)
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <uN************ **@tk2msftngp13 .phx.gbl>
Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
Date: Wed, 03 Dec 2003 14:01:09 -0800
NNTP-Posting-Host: actionjackson13 3.dsl.frii.net 216.17.147.133
Lines: 1
Path: cpmsftngxa06.ph x.gbl!cpmsftngx a08.phx.gbl!cpm sftngxa10.phx.g bl!TK2MSFTNGXA0 5
..phx.gbl!TK2MS FTNGP08.phx.gbl !tk2msftngp13.p hx.gblXref: cpmsftngxa06.ph x.gbl microsoft.publi c.dotnet.framew ork.aspnet:1948 74
X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet

Tearing my hair out with this one....

I've got a tiny ASP.NET site which works fine on my development machine.

I put the application onto a Test machine, and I get:

Cannot execute a program. The command being executed was
"c:\winnt\micr osoft.net\frame work\v1.0.3705\ csc.exe" /noconfig

The first line of the trace is:

ExternalExcept ion (0x5): Cannot execute a program....

Now, I'm aware that Win32 error 5 = Access Denied.

To support this, the web server has the IIS Lockdown tool installed. I
de-installed this and the application ran successfully. However, it's
not really an option to leave this off permanently, so I need to get
both working together.

When I reapplied IIS Lockdown, the app stopped working again.

Now, the funnies:

1. The server happily runs other ASP and ASP.NET sites without any
permissions issues, lockdown or not. The other ASP site has exactly the
same config (essentially, High Isolation). Obviously different physical
file location.
2. When I load the pages in IE, neither RegMon nor FileMon show any
Access Denied errors. Or indeed, errors at all.
3. As far as I can see, the ASPNET worker process account has access to
both the source files and csc.exe (and the subfolders under the
framework directory)

Has anyone seen this problem before?
Can anyone think of what else I can do to chase this one down?

TIA,
Pete

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!


Nov 18 '05 #4
Jim,

ASPNET was a member of 2 groups, users and web applications.
I removed it from Web Applications. It makes no difference to the app
(still doesn't run).

Filemon still shows no access denied errors. However I have noticed
something funny on it. There are 4 frames on the site's front page, and
filemon shows the site's global.asax being accessed (read, successfully)
four times. No record of any access to any other file on the site, just
global.asax.

It's almost as if the site files themselves aren't being accessed,
except that (a) filemon should show this, and (b) default.htm, which
contains the frameset, is most definitely being loaded OK.

Presumably the ASP.NET dll will see that an aspx file has been
requested, then attempt to run it against csc? So if it can't run csc
that would explain why it never accesses the aspx file? I'm guessing
here but it seems reasonable.

Any more thoughts?

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
Nov 18 '05 #5
Pete,

I agree that you should see that in Filemon. However, it's not surprising
that global.asax is getting hit. The Application_Beg inRequest event will
fire on each request.

The most common cause of this problem is that the ASPNET account is a
member of one or more of these groups created by the IIS Lockdown tool,
both of which are explicitly denied access to many areas of the file
system. However, there are other reasons as well. See the following:

315904 BUG: "ExternalExcept ion: Cannot Execute a Program" Error Message When
http://support.microsoft.com/?id=315904

If none of that helps you, you should open a case with us and let us do
some additional troubleshooting .

Jim Cheshire, MCSE, MCSD [MSFT]
Developer Support
ASP.NET
ja******@online .microsoft.com

This post is provided as-is with no warranties and confers no rights.

--------------------
From: Pete <an*******@devd ex.com>
References: <V8************ **@cpmsftngxa06 .phx.gbl>
X-Newsreader: AspNNTP 1.50 (ActionJackson. com)
Subject: RE: ASP.NET Permissions (I think)
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <u6************ **@TK2MSFTNGP11 .phx.gbl>
Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
Date: Wed, 03 Dec 2003 16:20:34 -0800
NNTP-Posting-Host: actionjackson13 3.dsl.frii.net 216.17.147.133
Lines: 1
Path: cpmsftngxa06.ph x.gbl!TK2MSFTNG P08.phx.gbl!TK2 MSFTNGP11.phx.g bl
Xref: cpmsftngxa06.ph x.gbl microsoft.publi c.dotnet.framew ork.aspnet:1949 04
X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet

Jim,

ASPNET was a member of 2 groups, users and web applications.
I removed it from Web Applications. It makes no difference to the app
(still doesn't run).

Filemon still shows no access denied errors. However I have noticed
something funny on it. There are 4 frames on the site's front page, and
filemon shows the site's global.asax being accessed (read, successfully)
four times. No record of any access to any other file on the site, just
global.asax.

It's almost as if the site files themselves aren't being accessed,
except that (a) filemon should show this, and (b) default.htm, which
contains the frameset, is most definitely being loaded OK.

Presumably the ASP.NET dll will see that an aspx file has been
requested, then attempt to run it against csc? So if it can't run csc
that would explain why it never accesses the aspx file? I'm guessing
here but it seems reasonable.

Any more thoughts?

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!


Nov 18 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

10
2630
by: Shelly | last post by:
I have a new server and I have my files up there. The files are in /var/www/html/. In this directory I have another directory that I created called "users". I am unable to figure out how to set permissions on this directory, and what those permissions should be. I am using ShieldHost. When there is a new user, and he enters his desired...
5
11608
by: Ross Presser | last post by:
As our customers demand that we tighten our IT security in the company, I've been asked to prepare a report quarterly showing, for each user in Active directory, what his effective permissions are for every table in every database that he has permission for on our SQL Server 2000 server. I searched a bit for a tool to do this, but all I found...
5
2637
by: Peter Verhelst | last post by:
Hello, Currently I am running an Access database on a windows WTS server, running Microsoft Windows 2000 server 5.00.2195 Service Pack 3. This database should be accessible for everybody in our network, so for the time being, I have changed the permission for the .mdb file to Everone -> Full control (I know this is not professional, but...
16
2189
by: Lyle Fairfield | last post by:
There is an MS-SQL table named Bugs_Comments_and_Suggestions. There is a form named Bugs_Comments_and_Suggestions. To allow John Doe to use this form, we GRANT him LOGIN and ACCESS permissions to the db and SELECT permissions on the stored procedure which is the record source for the BOUND form. To allow John Doe to "UPDATE, INSERT,...
3
1348
by: Larry Serflaten | last post by:
I just put a simple exe out on the internet and tried to run it. All it does is manipulate its own images and respond to its own controls, but the darn thing needed FULL TRUST to run properly! Does VS.NET have some sort of method to spit out warnings when stepping outside of the trust boundries? The trace on the security screen pointed to...
3
5296
by: Simon Watkins | last post by:
Our server administrators recently changed the permissions of most of our servers (you know how it is, the developers had, shock horror, got to know the domain administrator password, and some decision was made on high to clamp down on everything) This consequently has had the effect of rendering our live ASP.NET 2 web server useless with...
8
7694
by: jporter188 | last post by:
Hello, I am working on a project to manipulate XML files. All of the files, the code, and the output are on network drives. When I run my program I get an exception (see below). I tried giving the LocalIntranet_Zone full permissions in the .NET Framework 2.0 Configuration msc. This had no effect whatsoever. What do I need to do to fix this?...
3
4427
by: palepimp | last post by:
Hello all, I have searched far and wide for a solution to my issue. In short, here is the problem: 1. 3 PC's enter data into an Access 2003 database (PC's are running Vista w/ Office 2007 pro). The database has been used for a long time and we haven't upgraded it to a 2007 version database. 2. One of the PC's hosts the "master"...
30
1946
by: Adam Baker | last post by:
Hello, I'm writing a site where a handful of people will be able to edit the content using PHP scripts (FCKeditor). The content is stored as individual files in a directory. I'd like to validate the "editors" using PHP, cookies, etc. The question is what file permissions I need to allow for the content to be writable by my PHP script. Do I...
1
4357
by: Jim Mandala | last post by:
I had a user that converted an application from Access 2003 to Access 2007. The application is split front-end/backj end. When trying to open certain forms, the front end reportst that they don't have read permissions on the table. Neverthess, it is possible to actually open (and read the table directly while still in the front end. We...
0
7698
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main...
0
8122
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that...
1
7673
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For...
0
7970
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the...
1
5513
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes...
0
3640
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
2113
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
1
1213
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
0
937
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.