OK, I did that on the script file, the batch file, the folder and wscript.exe
Still no luck.
Maybe wscript.exe is the wrong file I'm changing permissions on. (I made an assumption there).
Main Topics
Browse All TopicsHi all,
I've got an issue with a script that uses the WScript.Shell. The problem is that I keep getting a permission denied error.
I've set permissions on the folder, the file, and even "wscript.exe" file itself in the Windows\System32 folder to
"everyone" with full permissions with the same results.
I'm a bit baffled as to why I would still have a permissions issue.
The script is running on IIS 6.0 on Windows 2003 Server Enterprise - it is set up as a domain controller, so the IWAM account was given full permissions as well.
<%
Set oShell = Server.CreateObject("WScri
RetCode = oShell.Run("C:\test\test.b
%>
it crashes on the second line with " permission denied Microsoft VBScript runtime error '800a0046' "
What other permissions are there to set up?
I've done this in the past on IIS5 and earlier and all I had to do was set up the IUSR account with read & execute.
With full permissions set to "Everyone" this should work (unless I'm missing some other setting besides the files, the folders, the objects and the website).
Any ideas?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
the batch file has one line as follows:
ping 192.168.1.1
It doesn't return anything nor write anything yet.
I had a long fancy batch file before, but simplified it until I can figure this permissions issue out.
I think a big problem is that it is a domain controller (as in there are no local accounts) - I'll have to test it out on a W2K3 server that is not a DC.
NTFS permissions (all set to Full Control).
I set the IIS permissions (right click on the site, selected permissions, added IUSR & IWAM, set to Full Control)
Maybe there is a bug with WScript itself with file version "5.6.0.8827" like there was in the past with version 5.0 (there was a bug mentioned in the past in this forum).
This is ridiculous.
check out www.sysinternals.com
they have a file monitoring program for free that will give you access denied reports. this may help us find the issue.
I have the same problem. I get "Permision Denied" error from my classic ASP page.
Here's the senerio:
This Works:
Network user FRED on his desktop opens browser and goes to site on ServerA. ServerA runs a WScript.Shell run command on an Exe that does some stuff.
This Does NOT work:
(Same as above except, the website starts on a different server.)
Network user FRED on his desktop opens browser and goes to site on ServerB. ServerB then does a response.redirect to a page on ServerA and that page runs same WScript.Shell run command on an Exe that does some stuff.
However, this DOES work:
(Same as above except different network user. JOE is an admin on ServerA.)
Network user JOE on his desktop opens browser and goes to site on ServerB. ServerB then does a response.redirect to a page on ServerA and that page runs same WScript.Shell run command on an Exe that does some stuff.
In all cases, same exe, same website runs the exe, just that the web browser started from another server and it behaves differently depending on the user logged in using the browser.
Here is what I have already tried:
1) Set IWAN_machine and IUSR_machine to have full everything access to exe and dirs.
2) Set IWAN_machine and IUSR_machine as Admins on the server
3) The exe to run and folder has everyone in the world access.
4) Changed ServerA IIS default application pool to use "LOCAL SERVICE" instead of "NETWORK SERVICE" (this allowed the third senerio to work, ie JOE user it works)
I'm at my wits end and could use any insight in how to get this to work!
Thanks in advance!
---JHG
I had this problem using Windows Server 2003 and IIS. All my connection strings were correct, and filemon was not giving me any kind of error I could track down.
The problem was with the application pool on the IIS server. To fix the problem, I had to manually recycle the worker process to free up the connection. The application pool was set too generous on the amount of time to recycle.
To recycle the worker process:
1. Open IIS Manager through administrative tools
2. Expand your computer holding the web site
3. Expand the application pools
4. Find the application pool that your web site is using
5. Right click and choose recycle
I had the same issue when installing SQL 2005 with options from a script. We used Process Monitor from SysInternals. We determined that a file that it needed to write to during the installation was read-only. Here are steps to help you find which file is giving you the access denied error.
1) Start procmon.exe
2) clear the screen on any messages being logged from the toolbar.
3) Select the capture button
4) Start the process that is causing the access denied button until you get the access denied.
5) Stop the capture
6) Do a search for denied
7) Note: you can use the filter button to filter to your particular application, process or id.
Business Accounts
Answer for Membership
by: WMIFPosted on 2005-12-21 at 21:00:54ID: 15532047
iusr_machine and iwam_machine are not included in the everyone group. try explicitly naming those accounts to have permission.