Solved

Windows Service FileSystemWatcher access problems

Posted on 2007-04-10
8
1,518 Views
Last Modified: 2013-11-07
objective: To have a windows service running on a windows 2003 server (server 1) that listens for file changes and mirrors these changes onto server 2.

current implementation:

private const string SERVER_TWO = "\\\\server\\share$\\";

private void fileSystemWatcher1_Created(object sender, System.IO.FileSystemEventArgs e)
        {
            System.Threading.Thread.Sleep(5000);
            try
            {
                string outFile = SERVER_TWO + e.Name;
                if (System.IO.File.Exists(outFile))
                    System.IO.File.Delete(outFile);
                System.IO.File.Copy(e.FullPath, outFile);
            }
            catch (Exception ex)
            {
                //writes exception to file
            }
        }

implementation: I install this windows service just fine.  I have tried running it under the local system, which didn't work obviously.  However, I have also tried running it under my account which has full access to the entire network and still no success.

error: System.UnauthorizedAccessException: Access to the path '\\server\share$\subdir\test.txt' is denied.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.File.InternalCopy(String sourceFileName, String destFileName, Boolean overwrite)
   at WebServerSynch.ServiceMain.fileSystemWatcher1_Created(Object sender, FileSystemEventArgs e)

I have searched for this and the solution always seems to be that the account the web service is running under lacks permissions.  In this case, that just isn't true.  Any suggestions?
0
Comment
Question by:okerupt
  • 3
  • 3
  • 2
8 Comments
 
LVL 3

Expert Comment

by:JipFromParis
Comment Utility
I would suggest running with your own account for test purpose, then once fixed, trying to move to NETWORK SERVICE account which is the prefered account for such a service (local system is far to powerful for that). Now let's assume you are running with your own account.
Connect on SERVER_TWO computer and check that you have write access to both the share itself AND the underlying directory. In order to perform the check start the Administrative Tools / Computer Mangement program. Select the System Tools / Shared Folders / Shares tree node on the left. In the right pane, tight click the target share and check last two panes (Share Permissions AND Security). You should have write access on both.
Another easy interactive way to perform the test is to map the share in Windows Explorer (Tools / Map network drive menu item) then to try to drag an drop a file in the newly mapped share. If the drop succeed, you might assume you have correct permissions.

Can you proceed please and acknowledge your results.
0
 
LVL 5

Expert Comment

by:Yttribium
Comment Utility
When I tested it on my network, I wrote a quick demo;

System.IO.File.Copy(@"C:\test.bmp",@"\\10.0.0.6\c$\test.bmp");

And it worked without a problem... can you access this "directory" as you wrote it \\server\share$\subdir\, via explorer for instance?  If so, then I'm curious what account your service is running under.
0
 

Author Comment

by:okerupt
Comment Utility
I have tried running it under the local system account, which didn't work obviously.  However, I have also tried running it under my account which has full access to the entire network and still no success.

Also, yes I can access this \\server\share$\subdirectory just fine in windows explorer with my user account.  I ran the same code as a windows program and it worked fine so something is very strange here.
0
 

Author Comment

by:okerupt
Comment Utility
Also, I add files to these server shares from my local computer all the time so my account having access is pretty much unquestionable.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 5

Expert Comment

by:Yttribium
Comment Utility
Does the release compiled version have this problem?  Or while you're debugging?
0
 

Author Comment

by:okerupt
Comment Utility
This is the released version.  Also, I am not aware of how to debug a windows service using the visual studio 2005 IDE.  When I try, it gives me the "has to be installed using installutil" error.  
0
 
LVL 5

Accepted Solution

by:
Yttribium earned 250 total points
Comment Utility
When you run "Lusrmgr.msc", what are the permissions under the IUSR_Computername account etc?
0
 
LVL 3

Assisted Solution

by:JipFromParis
JipFromParis earned 250 total points
Comment Utility
WARNING : The configuration settings given below are powerful. It is discouraged to apply them on a production server "as is" without previous review by a specialist.

Now that we have cleared the basic access checks, we must fall back to the infamous .Net CAS (Code Access Security) which is a potential nightmare. These permissions are manageable from the ".Net Framework 2.0 Configuration" program to be found in the Start / Administrative Tools menu. Once there, you should go to My Computer / Runtime Security Policy / Machine / Code Groups / All_Code and expand it. Right click and create new group. On first panel giving it a meaningfull name and select Next. On the second panel, choose a URL condition type. An edit box will appear below in which you should type :

file://\\server2-name\share-name\*

where you will replace both the server name and the share name with appropriate names. On third and last pane, choose the "Full Trust" permission set then acknowledge and confirm. Now, try again to run your service. Hope this will resolve the problem. If so, you should dive into CAS configuration and devise a more restrictive policy than full trust then modify the code group you created and downgrade the trust level.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Welcome my friends to the second instalment and follow-up to our Minify and Concatenate Your Scripts and Stylesheets (http://www.experts-exchange.com/Programming/Languages/.NET/ASP.NET/A_4334-Minify-and-Concatenate-Your-Scripts-and-Stylesheets.html)…
It was really hard time for me to get the understanding of Delegates in C#. I went through many websites and articles but I found them very clumsy. After going through those sites, I noted down the points in a easy way so here I am sharing that unde…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now