Solved

IIS: Access to file on another system

Posted on 2007-11-16
6
800 Views
Last Modified: 2008-04-10
Hello,
I have my application written in VB.NET and have it deployed in IIS 7 on Windows Vista. In one of the pages, a file has to be opened that resides on a remote computer. I am building the path to the file, inside the code alright.

The problem I have is, when I launch this application using the local development server, I am able to click the link and open the remote file. But when I launch the application from IIS, I cannot open the application. Do I have to set the permissions for the IIS to access the file? The IIS server and the remote system are on the same LAN.

Thanks.
0
Comment
Question by:pavanbh
  • 3
  • 2
6 Comments
 
LVL 1

Expert Comment

by:philsmicronet
ID: 20303283
The world wide web service on your Vista machine is probably set to use the Local System account which does not have network access.

Right Click  Computer and Go Manage.
Double click on services
Find the World Wide Web Serice and go into properties
Click on the Logon Tab and select a user that has permissions to the file you are trying to access

0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 20303292
It's not the service that needs the permissions.  It's the Identity account used in the Application Pool that is used to access resources.
0
 

Author Comment

by:pavanbh
ID: 20303432
Thanks for your replies guys.

A little more clarification please. So tedbilly, in my IIS manager, in the Authentication, the anonymous authetication is enabled and is configured to use 'Specific User' which is IUSR. What do you suggest I do next? Thanks.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 20303719
No you aren't looking in the right place.  In IIS Manager you should see something called 'Application Pools' which will contain a 'Default Application'  If you right click that you will see a few tabs and one will be the 'Identity' tab.

You are looking at the role used to authenticate access to the site.  The Application Pool defines the access for the code that runs web applications.
0
 

Author Comment

by:pavanbh
ID: 20303859
I do not see the window with tabs when i right click the defaultAppPool. But if I open the advanced settings, I get a tabular window that has a section 'Process Model' in which the Identity is set to NetworkService with nothing in the 'IdentitySpecificUserCredentials' field. What and where do I need to change my settings? Thanks.
0
 
LVL 51

Accepted Solution

by:
Ted Bouskill earned 150 total points
ID: 20305490
Yes, now you are in the correct spot.  Here is the issue, you have give permissions to the remote file for 'NT AUTHORITY\NetworkService' or you have to create a domain account to use for the application pool then give that domain account permissions.

In order to protect web servers on the internet, IIS usually has very weak accounts that can basically only run the web application.  If you choose to give more permissions you have to do it manually and of course are putting your servers at greater risk.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Logparser is the smartest tool I have ever used in parsing IIS log files and there are many interesting things I wanted to share with everyone one of the  real-world  scenario from my current project. Let's get started with  scenario - How do w…
What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now