.NET Access is denied error

[Brent Burkart]

Has anyone seen the following error? My application was working fine and
this error just showed up this morning. Any help is appreciated?

[ApplicationException: Access is denied.
]
System.Security.Principal.WindowsIdentity._Resolve Identity(IntPtr
userToken) +0
System.Security.Principal.WindowsIdentity.get_Name () +71
System.Web.Configuration.AuthorizationConfigRule.I sUserAllowed(IPrincipal
user, String verb) +100
System.Web.Configuration.AuthorizationConfig.IsUse rAllowed(IPrincipal
user, String verb) +81
System.Web.Security.UrlAuthorizationModule.OnEnter (Object source,
EventArgs eventArgs) +178

System.Web.SyncEventExecutionStep.System.Web.HttpA pplication+IExecutionStep.
Execute() +60
System.Web.HttpApplication.ExecuteStep(IExecutionS tep step, Boolean&
completedSynchronously) +87

[John Soulis [MSFT]]

Hello Brent,
Please see if the article applies.
824308 BUG: IWAM Account Is Not Granted the Impersonate Privilege for
ASP.NET
http://support.microsoft.com/?id=824308

Thank you,
John Soulis
Microsoft, ASP.NET

This posting is provided "AS IS", with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

[Brent Burkart]

Thanks John,

However this is not a domain controller. I am testing on 2000 and will be
production on Windows XP. Neither one will act as a domain controller.

Any other ideas?

Brent
"John Soulis [MSFT]" <js***@online.microsoft.com> wrote in message
news:bg**************@cpmsftngxa06.phx.gbl...

Hello Brent,
Please see if the article applies.
824308 BUG: IWAM Account Is Not Granted the Impersonate Privilege for
ASP.NET
http://support.microsoft.com/?id=824308

Thank you,
John Soulis
Microsoft, ASP.NET

This posting is provided "AS IS", with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

[Simon Middlemiss]

"Brent Burkart" <Br***********@wvmb.com> wrote in message
news:eA**************@TK2MSFTNGP09.phx.gbl...

Has anyone seen the following error? My application was working fine and
this error just showed up this morning. Any help is appreciated?

Are you doing any XML Serialisation, and did you get the error when you
deployed??

[John Soulis [MSFT]]

I have seen that this fix also works on a machine that is not a domain
controller.
With SP4 a new privilege was introduced: Impersonate a Client After
Authentication
- The process identity for the aspnet_wp.exe worker process
(ASPNET
account by default) was lacking this privilege.

If this does not apply, what is your application doing at the time of the
error.

Thank you,
John Soulis
Microsoft, ASP.NET

This posting is provided "AS IS", with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

[Brent Burkart]

Thanks John,

I did apply this fix and it did work. Thanks so much,

Brent
"John Soulis [MSFT]" <js***@online.microsoft.com> wrote in message
news:dy**************@cpmsftngxa06.phx.gbl...

I have seen that this fix also works on a machine that is not a domain
controller.
With SP4 a new privilege was introduced: Impersonate a Client After
Authentication
- The process identity for the aspnet_wp.exe worker process
(ASPNET
account by default) was lacking this privilege.

If this does not apply, what is your application doing at the time of the
error.

Thank you,
John Soulis
Microsoft, ASP.NET

This posting is provided "AS IS", with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm