473,324 Members | 2,214 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,324 software developers and data experts.

Identity of asp_wp.exe

Hello!

How can I change the identity of asp_wp.exe (Asp.Net 2.0) process on Windows
2000 Server from ASPNET to LocalSystem?
I want to do it to bypass SeTcbPrivelege privelege problem.

Unfortunately, the method of changing asp_wp.exe identity described on
http://msdn2.microsoft.com/en-us/lib...hy(vs.80).aspx does not work.

Thank you in advance.
May 1 '07 #1
3 2957
re:
!Unfortunately, the method of changing asp_wp.exe identity described on
!http://msdn2.microsoft.com/en-us/lib...hy(vs.80).aspx does not work.

Yes, it does work. I've helped many people set up accounts using those instructions.
You can safely ignore the Application Pool instructions, since W2K doesn't use them.

re:
How can I change the identity of asp_wp.exe (Asp.Net 2.0) process on Windows 2000 Server from
ASPNET to LocalSystem?
Are you sure you don't mean the SYSTEM account ?

Besides impersonating the user, per the article :

<system.web>
<processModel enable="true"
userName="System" />
</system.web>

The "System" account doesn't need a password.

Also, that only works in machine.config, not in web.config.

I'd avoid impersonating the ASP.NET process account in machine.config.

You should do it, for a particular application, in web.config :
<identity impersonate="true" userName="accountname" password="password" />

See:
http://support.microsoft.com/default.aspx/kb/306158

Additionally, run
aspnet_regiis -ga "MachineName\Account"

Additionally, make sure the following ACLs are set :
http://msdn2.microsoft.com/en-us/lib...1e(VS.80).aspx

Also, you don't have to run ASP.NET as the SYSTEM account. In fact, you should *avoid* it.
You can run ASP.NET as *any* account you want to, provided you assign the correct permissions.

If you want to go that way ( and you should ), follow the instructions at :
http://msdn2.microsoft.com/en-us/library/ms998297.aspx

....*and* run the steps detailed above.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================
"Przemo Karlikowski" <ka****************@post.plwrote in message
news:OV**************@TK2MSFTNGP03.phx.gbl...
Hello!

How can I change the identity of asp_wp.exe (Asp.Net 2.0) process on Windows 2000 Server from
ASPNET to LocalSystem?
I want to do it to bypass SeTcbPrivelege privelege problem.

Unfortunately, the method of changing asp_wp.exe identity described on
http://msdn2.microsoft.com/en-us/lib...hy(vs.80).aspx does not work.

Thank you in advance.

May 1 '07 #2
I already had it in my machine.config:

<system.web>
<processModel enable="true" userName="System" />
</system.web>

I also ran
aspnet_regiis -ga SYSTEM

But instead of killing aspnet_wp.exe I should have restarted whole IIS and
that was the issue.
Now it works.

I'm writing Asp.Net application that manages Windows accounts, and for
several reasons it needs to run on System account.
At least on Windows 2000.
"Juan T. Llibre" <no***********@nowhere.comwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...
re:
!Unfortunately, the method of changing asp_wp.exe identity described on
!http://msdn2.microsoft.com/en-us/lib...hy(vs.80).aspx does not
work.

Yes, it does work. I've helped many people set up accounts using those
instructions.
You can safely ignore the Application Pool instructions, since W2K doesn't
use them.

re:
>How can I change the identity of asp_wp.exe (Asp.Net 2.0) process on
Windows 2000 Server from ASPNET to LocalSystem?

Are you sure you don't mean the SYSTEM account ?

Besides impersonating the user, per the article :

<system.web>
<processModel enable="true"
userName="System" />
</system.web>

The "System" account doesn't need a password.

Also, that only works in machine.config, not in web.config.

I'd avoid impersonating the ASP.NET process account in machine.config.

You should do it, for a particular application, in web.config :
<identity impersonate="true" userName="accountname" password="password" />

See:
http://support.microsoft.com/default.aspx/kb/306158

Additionally, run
aspnet_regiis -ga "MachineName\Account"

Additionally, make sure the following ACLs are set :
http://msdn2.microsoft.com/en-us/lib...1e(VS.80).aspx

Also, you don't have to run ASP.NET as the SYSTEM account. In fact, you
should *avoid* it.
You can run ASP.NET as *any* account you want to, provided you assign the
correct permissions.

If you want to go that way ( and you should ), follow the instructions at
:
http://msdn2.microsoft.com/en-us/library/ms998297.aspx

...*and* run the steps detailed above.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================

May 1 '07 #3
re:
Now it works.
Good news.

re:
!>I already had it in my machine.config:
!I'm writing Asp.Net application that manages Windows accounts, and for
!several reasons it needs to run on System account.

As long as you understand that, by putting that in machine.config,
*all* the applications which run on that server will run as the System account.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================
"Przemo Karlikowski" <ka****************@post.plwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...
>I already had it in my machine.config:

<system.web>
<processModel enable="true" userName="System" />
</system.web>

I also ran
aspnet_regiis -ga SYSTEM

But instead of killing aspnet_wp.exe I should have restarted whole IIS and that was the issue.
Now it works.

I'm writing Asp.Net application that manages Windows accounts, and for several reasons it needs to
run on System account.
At least on Windows 2000.
"Juan T. Llibre" <no***********@nowhere.comwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...
>re:
!Unfortunately, the method of changing asp_wp.exe identity described on
!http://msdn2.microsoft.com/en-us/lib...hy(vs.80).aspx does not work.

Yes, it does work. I've helped many people set up accounts using those instructions.
You can safely ignore the Application Pool instructions, since W2K doesn't use them.

re:
>>How can I change the identity of asp_wp.exe (Asp.Net 2.0) process on Windows 2000 Server from
ASPNET to LocalSystem?

Are you sure you don't mean the SYSTEM account ?

Besides impersonating the user, per the article :

<system.web>
<processModel enable="true"
userName="System" />
</system.web>

The "System" account doesn't need a password.

Also, that only works in machine.config, not in web.config.

I'd avoid impersonating the ASP.NET process account in machine.config.

You should do it, for a particular application, in web.config :
<identity impersonate="true" userName="accountname" password="password" />

See:
http://support.microsoft.com/default.aspx/kb/306158

Additionally, run
aspnet_regiis -ga "MachineName\Account"

Additionally, make sure the following ACLs are set :
http://msdn2.microsoft.com/en-us/lib...1e(VS.80).aspx

Also, you don't have to run ASP.NET as the SYSTEM account. In fact, you should *avoid* it.
>You can run ASP.NET as *any* account you want to, provided you assign the correct permissions.

If you want to go that way ( and you should ), follow the instructions at :
http://msdn2.microsoft.com/en-us/library/ms998297.aspx

...*and* run the steps detailed above.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================


May 1 '07 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
by: Eugene | last post by:
I have a table EugeneTest(id_num, fname, minit, lname) where field "id_num" is type IDENTITY and has UNIQUE constraint Let's say 2 user execute this code at the same time: DECLARE @return...
4
by: brent.ryan | last post by:
How do I get the next int value for a column before I do an insert in MY SQL Server 2000? I'm currently using Oracle sequence and doing something like: select seq.nextval from dual; Then I...
1
by: Donna | last post by:
How can I stop the asp_wp process on my computer? Each time I 'm stopping it in the taskmanager the process is started automatical again! Thanks Donna
0
by: GregO | last post by:
Windows 2000 Server SP3 ..NET Framework 1.1 I have a problem opening the control panel on a number of servers. Only when we kill the asp_wp.exe does the control panel kick into life. Is it...
8
by: Razak | last post by:
Hi, I have a class which basically do Impersonation in my web application. From MS KB sample:- ++++++++++++++++++++code starts Dim impersonationContext As...
4
by: Rich Denis | last post by:
Hello, We are having some issues with our .NET web applications. Every so often a computer will peg its CPU at 100% for some period of time. I am told anywhere between 30mins and 2 hours. I...
1
by: prem | last post by:
Hi, I need roles and activities of asp_wp.exe,aspnet_wp.exe and aspnet_isapi.dll. can any one please give description about how they are working and how they coordinate each other and when. ...
7
by: Danny Ni | last post by:
Hi, I inherited a web project from other programmer. I notice on my dev machine every time I request a page in IE or FF the CPU jumps to 100%, all utilized by asp_wp.exe. I did some...
8
by: Nicolas | last post by:
Hi, I was suffering for few days, I has 1 asp.net application running in window xp. the application is used for generate the reports. The problem is, when i try to run a report is open many...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.