Error writing to application lo from web app

[Leslie]

Using VS 2005 on Windows XP with SP2, I am attempting to write to the
application log.

I receive a dialog box that says: "Addiyional information: Ther source was
not found, but some or all event logs could not be searched. Inaccessible
logs: Security."
How should I correct this error?

Thanks,

Leslie

[Walter Wang [MSFT]]

Hi Leslie,

Thank you for your post.

Based on my understanding and experience, the exception is because you're
attempting to create an event source that doesn't exist, and the account
that you're using to create the source (implicitly through your attempt to
write an entry) doesn't have access to all registry keys required for the
source to be created. For ASP.NET Web Application, this normally means
ASP.NET worker process account doesn't have the access to write to registry
key to create the event log source.

You can refer to following KB for more information:

#PRB: "Requested Registry Access Is Not Allowed" Error Message When ASP.NET
Application Tries to Write New EventSource in the EventLog
http://support.microsoft.com/kb/329291

This KB introduces two resolutions to this issue:
1) Manually create the event log source in registry
2) Use EventLogInstall er class to create the event log with InstallUtil.

Hope this helps. Please feel free to post here if anything is unclear.

Sincerely,
Walter Wang
Microsoft Online Community Support

=============== =============== =============== =====
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.
=============== =============== =============== =====

This posting is provided "AS IS" with no warranties, and confers no rights.

[Gozirra]

The account running the aspnet application (aspnet) does not have the
needed permissions to write to the event log. Here's the first thing I
found in a quick search to get you started in resolving the issue.

http://objectsharp.com/blogs/bruce/a...11/03/180.aspx

[Leslie]

Walter,

Thanks, that worked great.

However, now I get an error that says, "Cannot open log for source 'SRP'.
You may not have write access."

This is occurring on a Win XP SP2 development machine.
I am running the web with impersonation on so I think that means I am using
local IUSR account.

Any ideas?

"Walter Wang [MSFT]" wrote:

Hi Leslie,

Thank you for your post.

Based on my understanding and experience, the exception is because you're
attempting to create an event source that doesn't exist, and the account
that you're using to create the source (implicitly through your attempt to
write an entry) doesn't have access to all registry keys required for the
source to be created. For ASP.NET Web Application, this normally means
ASP.NET worker process account doesn't have the access to write to registry
key to create the event log source.

You can refer to following KB for more information:

#PRB: "Requested Registry Access Is Not Allowed" Error Message When ASP.NET
Application Tries to Write New EventSource in the EventLog
http://support.microsoft.com/kb/329291

This KB introduces two resolutions to this issue:
1) Manually create the event log source in registry
2) Use EventLogInstall er class to create the event log with InstallUtil.

Hope this helps. Please feel free to post here if anything is unclear.

Sincerely,
Walter Wang
Microsoft Online Community Support

=============== =============== =============== =====
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.
=============== =============== =============== =====

This posting is provided "AS IS" with no warranties, and confers no rights.

[Walter Wang [MSFT]]

Hi Leslie,

Thank you for your quick reply.

Based on my understanding, you're impersonating fixed identity (the
IUSR_xxx account) to run your asp.net website. This account has very
limited privilege and by default cannot write to event log. You can refer
to following MSDN Library article:

#Event Logging Security
http://msdn.microsoft.com/library/de...us/eventlog/ba
se/event_logging_s ecurity.asp

#Security Descriptor Definition Language
http://msdn.microsoft.com/library/de...us/secauthz/se
curity/security_descri ptor_string_for mat.asp

While modifying CustomSD registry key of the application event log can
enable this account to write to event log, it's not recommended. The
recommended way is to only impersonate when required, for example when you
need to access a network resource or connect to a database. By default the
ASP.NET worker process acount will be able to write to the application
event log.

For more information on ASP.NET impersonation, please refer to following
MSDN Library article:

#How To: Use Impersonation and Delegation in ASP.NET 2.0
http://msdn.microsoft.com/library/de...us/dnpag2/html
/paght000023.asp

Hope this helps. Please feel free to post here if anything is unclear.
Regards,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support

=============== =============== =============== =====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=============== =============== =============== =====

This posting is provided "AS IS" with no warranties, and confers no rights.