ASPNET permission denied errors in Application log fill up event viewer.

Posted on 2004-04-19
Medium Priority
Last Modified: 2007-12-19
After installing ASP.NET on two different web servers, we noticed a long series of errors in the application log of the Event Viewer.  The error is:

Access to performance data was denied to ASPNET as attempted from  C:\WINNT\System32\WBEM\WinMgmt.exe

This error shows up multiple times, and appears to be hitting the perflib (performance counter).  To my knowledge, we don't have anything of our own actively trying to update the performance counter, so we are at a loss as to how to rectify this.

**** I did find an article on the web in which a user ran into this exact same problem.  However, their instructions were to do the following:

"In the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib, set the Access Control List so that the ASPNET user has Full Control"

The problem is we DON'T HAVE A KEY IN THIS REGISTRY AREA FOR THE ACCESS CONTROL LIST.  Do you have to add it?  Why does this occur with ASP.NET?  Does it occur with every install?  

We are also noticing another permission issue with ASP.NET:

Access denied attempting to launch a DCOM Server using DefaultLaunchPermssion. The server is:
{our server id here}
The user is ASPNET/SIR-WEB, SID=some numbers here.

I'm assuming these two errors are related.

Any gurus out there able to shine some light on me?

Question by:cacklebunny
  • 2
LVL 20

Accepted Solution

ihenry earned 300 total points
ID: 10936910
>> "In the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib,
>> set the Access Control List so that the ASPNET user has Full Control"
for security reason the ASP.NET user should has this level of permission.

You can try the following:

1. Enable the impersonation to allow ASP.NET process running under client security credentials.
ASP.NET Impersonation

2. Or change permission set of the code security access using .NET configuration utility.
Configuring .NET Code Access Security

Hope this helps
LVL 20

Expert Comment

ID: 10936917
Sorry for this,
for security reason the ASP.NET user should NOT has this level of permission.

Author Comment

ID: 10944414
>Sorry for this,
>for security reason the ASP.NET user should NOT has this level of permission.

Right, exactly.  If we were to make those changes it would be a major security breach.  

I'm curious:  Is this a .NET thing that we ALL are experiencing?  Because we installed .NET on two different machines and they are BOTH generating these same permissions errors.  Microsoft's site has zero information and I only could find the aforementioned article that didn't solve the issue.

LVL 96

Assisted Solution

by:Bob Learned
Bob Learned earned 300 total points
ID: 11179579
Something like this might help:



Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

In my previous two articles we discussed Binary Serialization (http://www.experts-exchange.com/A_4362.html) and XML Serialization (http://www.experts-exchange.com/A_4425.html). In this article we will try to know more about SOAP (Simple Object Acces…
This document covers how to connect to SQL Server and browse its contents.  It is meant for those new to Visual Studio and/or working with Microsoft SQL Server.  It is not a guide to building SQL Server database connections in your code.  This is mo…
Hi, this video explains a free download that you can incorporate into your Access databases, or use stand-alone for contact management. Contacts -- Names, Addresses, Phone Numbers, eMail Addresses, Websites, Lists, Projects, Notes, Attachments…
Did you know PowerShell can save you time with SaaS platforms? Simply leverage RESTfulAPIs to build your own PowerShell modules. These will kill repetitive tickets and tabs, using the command Invoke-RestMethod. Tune into this webinar to learn how…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question