ASPNET account and Domain Controller

[Richard Chandler]

We're having a problem with ASP.NET security and running on a Win2k Domain
Controller.

We can't set up the access rights to the registry for ASPNET as the user
doesn't exist, this access is required so that the process can obtain the
credentials from the registry (as stamped with aspnet_setreg.exe) and
impersonate the required network user.

Has anyone else got around this problem, other than not installing the
website on a domain controller.

Thanks for reading,

Richard.

[Martin Schmid]

There is a KB article addressing this... It can be done.

--
Thanks,
Martin Schmid, EIT, CCSA, MCDBA, MCSE

"Richard Chandler" <ri************@mapson.richardchandler.net> wrote in
message news:eF**************@TK2MSFTNGP09.phx.gbl...

We're having a problem with ASP.NET security and running on a Win2k Domain
Controller.

We can't set up the access rights to the registry for ASPNET as the user
doesn't exist, this access is required so that the process can obtain the
credentials from the registry (as stamped with aspnet_setreg.exe) and
impersonate the required network user.

Has anyone else got around this problem, other than not installing the
website on a domain controller.

Thanks for reading,

Richard.

[Ken Schaefer]

http://support.microsoft.com/default...b;EN-US;315158

Cheers
Ken
"Martin Schmid" <ma**********@sbcglobal.net.nospam> wrote in message
news:e2*************@TK2MSFTNGP11.phx.gbl...
: There is a KB article addressing this... It can be done.
:
: --
: Thanks,
: Martin Schmid, EIT, CCSA, MCDBA, MCSE
:
: "Richard Chandler" <ri************@mapson.richardchandler.net> wrote in
: message news:eF**************@TK2MSFTNGP09.phx.gbl...
: > We're having a problem with ASP.NET security and running on a Win2k
Domain
: > Controller.
: >
: > We can't set up the access rights to the registry for ASPNET as the user
: > doesn't exist, this access is required so that the process can obtain
the
: > credentials from the registry (as stamped with aspnet_setreg.exe) and
: > impersonate the required network user.
: >
: > Has anyone else got around this problem, other than not installing the
: > website on a domain controller.
: >
: > Thanks for reading,
: >
: > Richard.
: >
: >
:
:

[Mark]

Mine works when I set both the aspnet_wp and the iwam_machinename account
access to the registry keys. The web page that discusses the
aspnet_setreg.exe is a good source for more information. It will also let
you know that you need to set the "Network Service" for 2003 servers. The
KB article has a mistype on the account name by the way.

http://support.microsoft.com/default...b;en-us;329290

If you are able to get your impersonation to work help me out. I have
another thread dealing with other problems with getting impersonation to
work on a DC. "Failed to start monitoring file changes" is the name of the
thread. This is the error that I get once I try to access my asp.net web
site.

"Richard Chandler" <ri************@mapson.richardchandler.net> wrote in
message news:eF**************@TK2MSFTNGP09.phx.gbl...

We're having a problem with ASP.NET security and running on a Win2k Domain
Controller.

We can't set up the access rights to the registry for ASPNET as the user
doesn't exist, this access is required so that the process can obtain the
credentials from the registry (as stamped with aspnet_setreg.exe) and
impersonate the required network user.

Has anyone else got around this problem, other than not installing the
website on a domain controller.

Thanks for reading,

Richard.