Solved

Login failed for user DOMAIN\SERVER$, Active Directory Auhtentication

Posted on 2008-10-28
4
595 Views
Last Modified: 2012-06-21
I added security in the form of Roles and Users Groups in SQL 2005.  Using Active Directory I would like to connect to my application using the Roles which I have set-up in my web.config file.  
Aportion of my web.config file that pertains to connecting to the database and code snippet from one of the ASPX.VB files is included.

I am on week two of trying to resolve this error, your help is greatly appreciated.

Thank you.

LadyG

            
<connectionStrings>

  <add name="TiresConnectionString" connectionString="Data Source=DOMAIN\(INSTANCE17);Initial Catalog=TiresDb;Integrated Security=True"/>

  </connectionStrings>

<configProtectedData>

<providers>

<add useMachineProtection="false" keyEntropy="" name="TiresDataProtectionConfigurationProvider" 

type="System.Configuration.DpapiProtectedConfigurationProvider, System.Configuration, Version=2.0.0.0,Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"></add>

</providers>

</configProtectedData>

<system.web>

<authentication mode="Windows"/>

   <roleManager enabled="true" defaultProvider="AspNetSqlRoleProvider"

     cacheRolesInCookie="true" createPersistentCookie="false" cookieProtection="All">

<providers >

 <remove name="AspNetSqlRoleProvider" />

 <add name="AspNetSqlRoleProvider" applicationName="Tires"

 connectionStringName="TiresConnectionString"

 type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.0.0, Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"/>

 <remove name="AspNetWindowsTokenRoleProvider" />  

</providers>

</roleManager >

 <authorization>

 <allow roles ="Admin, Supervisor, User"/>

 <allow users ="DOMAIN\(INSTANCE17) Users,DOMAIN\(INSTANCE17) Supervisors, DOMAIN\(INSTANCE17) Admin Users"/>

<deny users="*"/>

</authorization>

 <identity impersonate="true"/>

<customErrors mode="Off" defaultRedirect="UnauthorizedUser.aspx">

<error statusCode="401" redirect="UnauthorizedUser.aspx"/>

</customErrors>

*********************

From my code behind file:

 If (Roles.IsUserInRole("Admin", "password")) Then

    Else

Response.Redirect("http://intranet.tires.asp")

End If

Open in new window

0
Comment
Question by:LadyGail
  • 2
  • 2
4 Comments
 
LVL 42

Expert Comment

by:EugeneZ
ID: 22830648
please see solution from
http://forums.asp.net/t/917229.aspx
0
 

Author Comment

by:LadyGail
ID: 22830782
More confusion has resulted by reading your suggested solution, not to say that contained within it is a solution, just I don't understand fully, where I need to begin.
Question:
Am I to modifiy the Machine.config file contents to resemble that listed on the solution site?
Where might I find the Machine.config file (do note that my level is beginner)?
My application has three level of users with a three passwords, how to I incorporate the specifics into the Machine.config file?
What is the Application Pool and where might I find it?
How to I ensure that the Application Pool is a member of IIS_WPG Group in order to give it rights to Microsoft.Net\version no...., and the temp directory.
How do I restart the App Pool?

Thank you.

LadyG
0
 

Author Comment

by:LadyGail
ID: 22830829
Additionaly I am using
SQL 2005
Active Directory
IIS6
.NET 2.0
0
 
LVL 42

Accepted Solution

by:
EugeneZ earned 250 total points
ID: 22834017
in IIS you can see what account is used for your Application Pool  (see tab identity)  ->it is probably network system account;
 
in local user groups on the server check if it is member of IIS_WPG
then:
--
for this account -give NTFS (Full)  permisssions  on the folder C:\windows\Microsoft.NET
--
<restart the App Pool?
in IIS right click  App Pool- stop - start  or restart IIS..
 
 
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Foreword (May 2015) This web page has appeared at Google.  It's definitely worth considering! https://www.google.com/about/careers/students/guide-to-technical-development.html How to Know You are Making a Difference at EE In August, 2013, one …
If I have to fix slow responding website my first thoughts are server side optimizations: the database may not be optimized or caching is not enabled, or things like that. We often overlook another major part of our web application: the client. We o…
This video teaches viewers how to create their own website using cPanel and Wordpress. Tutorial walks users through how to set up their own domain name from tools like Domain Registrar, Hosting Account, and Wordpress. More specifically, the order in…
Learn how to set-up custom confirmation messages to users who complete your Wufoo form. Include inputs from fields in your form, webpage redirects, and more with Wufoo’s confirmation options.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now