security exception writing to event log

[David Thielen]

Hi;

I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");

And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource resource) +48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean writable)
+2780713
System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData
sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 55
net.windward.po rtal.audit.Audi tor..cctor() in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 42

Any idea why?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

[Mark Fitzpatrick]

I don't believe the ASPNET user account has the permissions to write to the
event log. You would have to impersonate an account with a higher level of
permissions in order to do that. There should be some good alternatives
though if you do a search on google.
--
Hope this helps,
Mark Fitzpatrick
Former Microsoft FrontPage MVP 199?-2006
"David Thielen" <th*****@nospam .nospamwrote in message
news:B6******** *************** ***********@mic rosoft.com...

Hi;

I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");

And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource resource)
+48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean writable)
+2780713
System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData
sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 55
net.windward.po rtal.audit.Audi tor..cctor() in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 42

Any idea why?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

[David Thielen]

What is the suggested way of letting the sysadmin know something bad happened
then? I am testing the code path of the log file cannot be opened so I can't
log the error. I need to put it somewhere.

What do others do? I don't want to store a username/password to impersonate
as that is a big security hole.

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"Mark Fitzpatrick" wrote:

I don't believe the ASPNET user account has the permissions to write to the
event log. You would have to impersonate an account with a higher level of
permissions in order to do that. There should be some good alternatives
though if you do a search on google.
--
Hope this helps,
Mark Fitzpatrick
Former Microsoft FrontPage MVP 199?-2006
"David Thielen" <th*****@nospam .nospamwrote in message
news:B6******** *************** ***********@mic rosoft.com...

Hi;

I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");

And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource resource)
+48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean writable)
+2780713
System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData
sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 55
net.windward.po rtal.audit.Audi tor..cctor() in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 42

Any idea why?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

[bruce barker \(sqlwork.com\)]

by default asp.net does not have access to registery. you should add the
applicaion node, message file key to registery, and give asp.net access.

-- bruce (sqlwork.com)

"David Thielen" <th*****@nospam .nospamwrote in message
news:B6******** *************** ***********@mic rosoft.com...

Hi;

I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");

And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource resource)
+48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean writable)
+2780713
System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData
sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 55
net.windward.po rtal.audit.Audi tor..cctor() in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 42

Any idea why?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

[sloan]

If file or event log permissions are an issue.

Then

1. Write an entry to a database, even a local access database.
2. Send an email.

The EMAB was actually good for getting something off the ground.
Exception Management Application Block

The default behavior is to write to the EventLog, however, you can extend
some Interfaces, setup some info in your webconfig, and have it do something
else.
http://www.google.com/search?hl=en&q...mlPublisher%22
http://builder.com.com/5100-6374-5110833.html

That would get you started.

Its worth the time, because ......... when you finally get it write, you
only have to put 1 line of code in to get the exception logged.

Dim x, y As Integer
Try
x = 5 / y
Catch ex As Exception
ExceptionManage r.Publish(ex)
End Try

That's nice!

The EnterpriseLibra ry is a little too much for what I need, so I stuck with
the original EMAB.


"David Thielen" <th*****@nospam .nospamwrote in message
news:4F******** *************** ***********@mic rosoft.com...

What is the suggested way of letting the sysadmin know something bad

happened

then? I am testing the code path of the log file cannot be opened so I

can't

log the error. I need to put it somewhere.

What do others do? I don't want to store a username/password to

impersonate

as that is a big security hole.

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"Mark Fitzpatrick" wrote:

I don't believe the ASPNET user account has the permissions to write to

the

event log. You would have to impersonate an account with a higher level

of

permissions in order to do that. There should be some good alternatives
though if you do a search on google.
--
Hope this helps,
Mark Fitzpatrick
Former Microsoft FrontPage MVP 199?-2006
"David Thielen" <th*****@nospam .nospamwrote in message
news:B6******** *************** ***********@mic rosoft.com...

Hi;
>
I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");
>
And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource

resource)

+48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean

writable)

+2780713
>

System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData

sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in
>

C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 5
5

net.windward.po rtal.audit.Audi tor..cctor() in
>

C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 4
2

>
Any idea why?
>
--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com
>
Cubicle Wars - http://www.windwardreports.com/film.htm
>
>

[David Thielen]

But what do I use to get a message to the admin if db access and mail fails?
Both of those can easily fail.

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"sloan" wrote:

>
If file or event log permissions are an issue.

Then

1. Write an entry to a database, even a local access database.
2. Send an email.

The EMAB was actually good for getting something off the ground.
Exception Management Application Block

The default behavior is to write to the EventLog, however, you can extend
some Interfaces, setup some info in your webconfig, and have it do something
else.
http://www.google.com/search?hl=en&q...mlPublisher%22
http://builder.com.com/5100-6374-5110833.html

That would get you started.

Its worth the time, because ......... when you finally get it write, you
only have to put 1 line of code in to get the exception logged.

Dim x, y As Integer
Try
x = 5 / y
Catch ex As Exception
ExceptionManage r.Publish(ex)
End Try

That's nice!

The EnterpriseLibra ry is a little too much for what I need, so I stuck with
the original EMAB.


"David Thielen" <th*****@nospam .nospamwrote in message
news:4F******** *************** ***********@mic rosoft.com...

What is the suggested way of letting the sysadmin know something bad

happened

then? I am testing the code path of the log file cannot be opened so I

can't

log the error. I need to put it somewhere.

What do others do? I don't want to store a username/password to

impersonate

as that is a big security hole.

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"Mark Fitzpatrick" wrote:

I don't believe the ASPNET user account has the permissions to write to

the

event log. You would have to impersonate an account with a higher level

of

permissions in order to do that. There should be some good alternatives
though if you do a search on google.
>
>
--
Hope this helps,
Mark Fitzpatrick
Former Microsoft FrontPage MVP 199?-2006
>
>
"David Thielen" <th*****@nospam .nospamwrote in message
news:B6******** *************** ***********@mic rosoft.com...
Hi;

I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");

And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource

resource)

+48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean

writable)

+2780713

System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData

sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in

C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 5
5

net.windward.po rtal.audit.Audi tor..cctor() in

C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 4
2

Any idea why?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


>
>
>

[David Thielen]

How do I do that? I've been searching and not finding anything about this.

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"bruce barker (sqlwork.com)" wrote:

by default asp.net does not have access to registery. you should add the
applicaion node, message file key to registery, and give asp.net access.

-- bruce (sqlwork.com)

"David Thielen" <th*****@nospam .nospamwrote in message
news:B6******** *************** ***********@mic rosoft.com...

Hi;

I am trying to write to the event log using:
public const string EVENT_LOG_NAME = "Windward Portal";
if (!EventLog.Sour ceExists(EVENT_ LOG_NAME))
EventLog.Create EventSource(EVE NT_LOG_NAME, "Applicatio n");

And I am getting the exception:
[SecurityExcepti on: Requested registry access is not allowed.]
System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource resource)
+48
Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean writable)
+2780713
System.Diagnost ics.EventLog.Cr eateEventSource (EventSourceCre ationData
sourceData) +360
System.Diagnost ics.EventLog.Cr eateEventSource (String source, String
logName) +41
net.windward.po rtal.audit.Audi tor.WriteEvent( String msg,
EventLogEntryTy pe elet) in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 55
net.windward.po rtal.audit.Audi tor..cctor() in
C:\src\RePortal \WindwardPortal Engine\net\wind ward\portal\aud it\Auditor.cs:1 42

Any idea why?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

[Walter Wang [MSFT]]

Hi Dave,

If your ASP.NET web application runs in medium trust level, you will need
additional configuration steps to write to event log. See following article:

#How To: Use Medium Trust in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/ms998341.aspx
In ASP.NET version 1.1, you had to grant code full trust to access the
event log. This is no longer required in ASP.NET version 2.0, although you
must still create a custom trust policy file to grant the
EventLogPermiss ion, as described later in this document.
...
(search section titled "EventLogPermis sion")

Sincerely,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support

=============== =============== =============== =====
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications. If you are using Outlook Express, please make sure you clear the
check box "Tools/Options/Read: Get 300 headers at a time" to see your reply
promptly.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.
=============== =============== =============== =====

This posting is provided "AS IS" with no warranties, and confers no rights.

[David Thielen]

This is strange - the only use of "trust" in machine.config is:
<section name="trust"
type="System.We b.Configuration .TrustSection, System.Web, Version=2.0.0.0 ,
Culture=neutral , PublicKeyToken= b03f5f7f11d50a3 a"
allowDefinition ="MachineToAppl ication" />

And the Web.Config in C:\WINDOWS\Micr osoft.NET\Frame work\v2.0.50727 \CONFIG is:
<trust level="Full" originUrl="" />

No trust set in my app's config.web. Is there something else it could be?

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"Walter Wang [MSFT]" wrote:

Hi Dave,

If your ASP.NET web application runs in medium trust level, you will need
additional configuration steps to write to event log. See following article:

#How To: Use Medium Trust in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/ms998341.aspx
In ASP.NET version 1.1, you had to grant code full trust to access the
event log. This is no longer required in ASP.NET version 2.0, although you
must still create a custom trust policy file to grant the
EventLogPermiss ion, as described later in this document.
...
(search section titled "EventLogPermis sion")

Sincerely,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support

=============== =============== =============== =====
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications. If you are using Outlook Express, please make sure you clear the
check box "Tools/Options/Read: Get 300 headers at a time" to see your reply
promptly.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.
=============== =============== =============== =====

This posting is provided "AS IS" with no warranties, and confers no rights.

[David Thielen]

To handle medium trust (I want to try that in case it is set somehow) it says
I need to create a custom policy file and a permission set. Can you point me
to a url that explains what this is, where to place these files, and the full
syntax of them.

--
thanks - dave
david_at_windwa rd_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm


"Walter Wang [MSFT]" wrote:

Hi Dave,

If your ASP.NET web application runs in medium trust level, you will need
additional configuration steps to write to event log. See following article:

#How To: Use Medium Trust in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/ms998341.aspx
In ASP.NET version 1.1, you had to grant code full trust to access the
event log. This is no longer required in ASP.NET version 2.0, although you
must still create a custom trust policy file to grant the
EventLogPermiss ion, as described later in this document.
...
(search section titled "EventLogPermis sion")

Sincerely,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support

=============== =============== =============== =====
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications. If you are using Outlook Express, please make sure you clear the
check box "Tools/Options/Read: Get 300 headers at a time" to see your reply
promptly.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.
=============== =============== =============== =====

This posting is provided "AS IS" with no warranties, and confers no rights.