468,290 Members | 2,034 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 468,290 developers. It's quick & easy.

ASPNET account and Domain Controller

We're having a problem with ASP.NET security and running on a Win2k Domain
Controller.

We can't set up the access rights to the registry for ASPNET as the user
doesn't exist, this access is required so that the process can obtain the
credentials from the registry (as stamped with aspnet_setreg.exe) and
impersonate the required network user.

Has anyone else got around this problem, other than not installing the
website on a domain controller.

Thanks for reading,

Richard.
Nov 18 '05 #1
3 1743
There is a KB article addressing this... It can be done.

--
Thanks,
Martin Schmid, EIT, CCSA, MCDBA, MCSE

"Richard Chandler" <ri************@mapson.richardchandler.net> wrote in
message news:eF**************@TK2MSFTNGP09.phx.gbl...
We're having a problem with ASP.NET security and running on a Win2k Domain
Controller.

We can't set up the access rights to the registry for ASPNET as the user
doesn't exist, this access is required so that the process can obtain the
credentials from the registry (as stamped with aspnet_setreg.exe) and
impersonate the required network user.

Has anyone else got around this problem, other than not installing the
website on a domain controller.

Thanks for reading,

Richard.

Nov 18 '05 #2
http://support.microsoft.com/default...b;EN-US;315158

Cheers
Ken
"Martin Schmid" <ma**********@sbcglobal.net.nospam> wrote in message
news:e2*************@TK2MSFTNGP11.phx.gbl...
: There is a KB article addressing this... It can be done.
:
: --
: Thanks,
: Martin Schmid, EIT, CCSA, MCDBA, MCSE
:
: "Richard Chandler" <ri************@mapson.richardchandler.net> wrote in
: message news:eF**************@TK2MSFTNGP09.phx.gbl...
: > We're having a problem with ASP.NET security and running on a Win2k
Domain
: > Controller.
: >
: > We can't set up the access rights to the registry for ASPNET as the user
: > doesn't exist, this access is required so that the process can obtain
the
: > credentials from the registry (as stamped with aspnet_setreg.exe) and
: > impersonate the required network user.
: >
: > Has anyone else got around this problem, other than not installing the
: > website on a domain controller.
: >
: > Thanks for reading,
: >
: > Richard.
: >
: >
:
:
Nov 18 '05 #3
Mine works when I set both the aspnet_wp and the iwam_machinename account
access to the registry keys. The web page that discusses the
aspnet_setreg.exe is a good source for more information. It will also let
you know that you need to set the "Network Service" for 2003 servers. The
KB article has a mistype on the account name by the way.

http://support.microsoft.com/default...b;en-us;329290

If you are able to get your impersonation to work help me out. I have
another thread dealing with other problems with getting impersonation to
work on a DC. "Failed to start monitoring file changes" is the name of the
thread. This is the error that I get once I try to access my asp.net web
site.

"Richard Chandler" <ri************@mapson.richardchandler.net> wrote in
message news:eF**************@TK2MSFTNGP09.phx.gbl...
We're having a problem with ASP.NET security and running on a Win2k Domain
Controller.

We can't set up the access rights to the registry for ASPNET as the user
doesn't exist, this access is required so that the process can obtain the
credentials from the registry (as stamped with aspnet_setreg.exe) and
impersonate the required network user.

Has anyone else got around this problem, other than not installing the
website on a domain controller.

Thanks for reading,

Richard.

Nov 18 '05 #4

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

2 posts views Thread by Stefano | last post: by
3 posts views Thread by Paul D. Fox | last post: by
1 post views Thread by Michael Maes | last post: by
7 posts views Thread by Billy Angers | last post: by
10 posts views Thread by =?Utf-8?B?ZGF2aWQ=?= | last post: by
reply views Thread by NPC403 | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.