Access to temporary ASP.NET Files is denied?

[Dave]

Hi,

I wanted to impersonate the ASPNET account so I created
another one in order to connect to SQL server using
integrated security.

I'm testing this against the Northwind db by adding this
to my web.config:

<identity impersonate="true" userName="ASPNET_Northwind"
password="Password1" />

This worked when I had VS 2002 and .NET 1.0 on Windows
XP. However, I just upgraded to VS 2003 and .NET 1.1 now
I get the following:

Access to the
path "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
\Temporary ASP.NET Files\<appname>\ffbab835\e23d26c7
\hash.web" is denied.

When I set impersonate to "false" I don't get the message.

Any ideas? Thanks, Dave.

[Dave]

Thanks, I ended up following the instructions in:

http://msdn.microsoft.com/architectu...cation/default
..aspx?pull=/library/en-us/dnnetsec/html/SecNetHT01.asp

The key was giving the Full control to the new account as
described which I wasn't doing.

Dave.

-----Original Message-----
Yes - give the user you are impersonating permissions to the TemporaryASP.NET Files directory.

Also, you may want to investigate the aspnet_setreg tool (search for it onMicrosoft.com) if you don't like having your user/pass sitting in a configfile unencrypted.

--
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
--
"Dave" <Da*********@hotmail.com> wrote in message
news:1f****************************@phx.gbl...

Hi,

I wanted to impersonate the ASPNET account so I created
another one in order to connect to SQL server using
integrated security.

I'm testing this against the Northwind db by adding this to my web.config:

<identity impersonate="true" userName="ASPNET_Northwind" password="Password1" />

This worked when I had VS 2002 and .NET 1.0 on Windows
XP. However, I just upgraded to VS 2003 and .NET 1.1 now I get the following:

Access to the
path "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
\Temporary ASP.NET Files\<appname>\ffbab835\e23d26c7
\hash.web" is denied.

When I set impersonate to "false" I don't get the message.
Any ideas? Thanks, Dave.

.

[James Zhuo]

window 2003 server seems to have much tighter security than previous
editions

"Dave" <Da*********@hotmail.com> wrote in message
news:00****************************@phx.gbl...

Thanks, I ended up following the instructions in:

http://msdn.microsoft.com/architectu...cation/default
.aspx?pull=/library/en-us/dnnetsec/html/SecNetHT01.asp

The key was giving the Full control to the new account as
described which I wasn't doing.

Dave.

-----Original Message-----
Yes - give the user you are impersonating permissions to

the Temporary

ASP.NET Files directory.

Also, you may want to investigate the aspnet_setreg tool

(search for it on

Microsoft.com) if you don't like having your user/pass

sitting in a config

file unencrypted.

--
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
--
"Dave" <Da*********@hotmail.com> wrote in message
news:1f****************************@phx.gbl...

Hi,

I wanted to impersonate the ASPNET account so I created
another one in order to connect to SQL server using
integrated security.

I'm testing this against the Northwind db by adding this to my web.config:

<identity impersonate="true" userName="ASPNET_Northwind" password="Password1" />

This worked when I had VS 2002 and .NET 1.0 on Windows
XP. However, I just upgraded to VS 2003 and .NET 1.1 now I get the following:

Access to the
path "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
\Temporary ASP.NET Files\<appname>\ffbab835\e23d26c7
\hash.web" is denied.

When I set impersonate to "false" I don't get the message.
Any ideas? Thanks, Dave.

.