• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1230
  • Last Modified:

Access to path denied to Intranet users trying to install "One Click" Published application

I've published a Windows app to our Intranet with Visual Studio 2008.  When someone clicks the "Install" button on the publish web page they get this error

Cannot retrieve application.  Authentication Error.  with the detail below.

When I select the Properties of the folder and look in the Security tab I see "Administrators (INTRASERVE\Administrators)" with "Full Control".
ASP.NET Machine Account (INTRASERVE\ASPNET) with all permissions allowed except "Full Control"
Everyone with "Full Control"
IIS_WPG (INTRASERVE\IIS_WPG) with Full Control

INTERACTIVE with only "List Folder Contents"
Internet Guest Account (INTRASERVE\IUSR_INTRASER... with Read and Write only
NETWORK with List Folder Contents only
NETWORK SERVICE with List Folder Contents only
S-1-5-21-691920830-41263507-2527172458-1024 with List Folder Contenents only
SYSTEM with Full Control
and Users (INTRASERVE\Users) with "Read & Execute", "List Folder Contents" and "Read" permissions set.

Another "Domain Admin" user and myself can launch the application with no problems.

Any ideas where the problem may lie?
SOURCES
            Deployment url                          : http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application
                                                                        Server              : Microsoft-IIS/6.0
                                                                        X-Powered-By   : ASP.NET
            Deployment Provider url             : file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application

ERROR SUMMARY
            Below is a summary of the errors, details of these errors are listed later in the log.
            * Activation of http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application resulted in exception. Following failure messages were detected:
                        + Downloading file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application did not succeed.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

Open in new window

0
megnin
Asked:
megnin
  • 14
  • 10
1 Solution
 
60MXGCommented:
The physical folder need to assign the permission not just the IIS setting!
0
 
60MXGCommented:
Try to assign the permission with interactive users/Network users with "Read & Execute" permission!
0
 
megninAuthor Commented:
This is odd.  The application used to work for everyone.
I remoted into the server and set the permissions on the physical folder to Read & Execute to nearly every user intity listed.  Users are still getting the "Cannot retrieve application.  Authentication Error" error.
0
Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

 
60MXGCommented:
Did you check the physical file permission "WorkForceOneSignature.application"?
0
 
megninAuthor Commented:
Here is the full details of the error:
PLATFORM VERSION INFO
            Windows                                 : 5.1.2600.131072 (Win32NT)
            Common Language Runtime    : 2.0.50727.832
            System.Deployment.dll                       : 2.0.50727.832 (QFE.050727-8300)
            mscorwks.dll                           : 2.0.50727.832 (QFE.050727-8300)
            dfdll.dll                                   : 2.0.50727.42 (RTM.050727-4200)
            dfshim.dll                                : 2.0.50727.42 (RTM.050727-4200)

SOURCES
            Deployment url                                    : http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application
                                                                        Server             : Microsoft-IIS/6.0
                                                                        X-Powered-By            : ASP.NET
            Deployment Provider url                     : file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application

ERROR SUMMARY
            Below is a summary of the errors, details of these errors are listed later in the log.
            * Activation of http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application resulted in exception. Following failure messages were detected:
                        + Downloading file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application did not succeed.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

COMPONENT STORE TRANSACTION FAILURE SUMMARY
            No transaction error was detected.

WARNINGS
            There were no warnings during this operation.

OPERATION PROGRESS STATUS
            * [12/30/2009 4:17:54 PM] : Activation of http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application has started.

ERROR DETAILS
            Following errors were detected during this operation.
            * [12/30/2009 4:17:54 PM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
                        - Downloading file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application did not succeed.
                        - Source: System.Deployment
                        - Stack trace:
                                    at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
                                    at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
                                    at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
                                    at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
                                    at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirect(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
                                    at System.Deployment.Application.DownloadManager.FollowDeploymentProviderUri(SubscriptionStore subStore, AssemblyManifest& deployment, Uri& sourceUri, TempFile& tempFile, IDownloadNotification notification, DownloadOptions options)
                                    at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
                                    at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut)
                                    at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
                        --- Inner Exception ---
                        System.Net.WebException
                        - Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        - Source: System
                        - Stack trace:
                                    at System.Net.FileWebRequest.EndGetResponse(IAsyncResult asyncResult)
                                    at System.Net.FileWebRequest.GetResponse()
                                    at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
                        --- Inner Exception ---
                        System.Net.WebException
                        - Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        - Source: System
                        - Stack trace:
                                    at System.Net.FileWebResponse..ctor(FileWebRequest request, Uri uri, FileAccess access, Boolean asyncHint)
                                    at System.Net.FileWebRequest.GetResponseCallback(Object state)
                        --- Inner Exception ---
                        System.UnauthorizedAccessException
                        - Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        - Source: mscorlib
                        - Stack trace:
                                    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
                                    at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
                                    at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, Boolean useAsync)
                                    at System.Net.FileWebStream..ctor(FileWebRequest request, String path, FileMode mode, FileAccess access, FileShare sharing, Int32 length, Boolean async)
                                    at System.Net.FileWebResponse..ctor(FileWebRequest request, Uri uri, FileAccess access, Boolean asyncHint)

COMPONENT STORE TRANSACTION DETAILS
            No transaction information is available.

Open in new window

0
 
megninAuthor Commented:
I just checked the physical file permissions on "WorkforceOneSignature.application"  they are almost all set to "Read & Execute" at least just like the folder permissions.
0
 
60MXGCommented:
Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

is  telling you that "WorkForceOneSignature.application" application is denied -- use your mouse and right click on  this "WorkForceOneSignature.application" file and check the permission to see if everyone can excute it.  Do you have antivirus/firewall running at your server?  Check the setting on the antivirus and firewall too!
0
 
megninAuthor Commented:
It works fine for everyone in the IT department just not for regular users.
0
 
60MXGCommented:
Create a user group called "Application User" or something like that and then add regular users into that group!  the grant "Application User" group permission with "Read and Execute" permission Or maybe you need to grant "Anynomous Users" with Read and Execute permission.
0
 
megninAuthor Commented:
>>Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

"Everyone" is set to "Full Control"
INTERACTIVE is set to "Read & Execute"
NETWORK is "Read & Execute"
NETWORK SERVICE I just added "Read & Execute", I'll go test a user again...
 
0
 
60MXGCommented:
Maybe stop IIS 6.0 then refresh/restart IIS just to release memory from the server.
0
 
megninAuthor Commented:
I'll try that.  It seems odd that this thing use to work find for everyone, even outside our network, people working from home and such.  I hope it just needs to be reset, I can't think of anything that has changed.
0
 
60MXGCommented:
Have you done any patches on the server lately?  The patch might fixed some of the security loopholes that remove the "anonymous user" from your original setting.
0
 
megninAuthor Commented:
I just went to a users computer and tried to browse to the folder and got stopped for a username and password at the e$ drive where inetpub is located.  I just went back to the server and set "Everyone" to Read & Execute.  I'll see if that was the problem.
I'll ask our network analyst if he's done any patches.  We are installing the Microsoft Updates all the time though.
0
 
megninAuthor Commented:
Well after setting "Everyone" to Read & Execute with "Apply To" This folder, subfolders and files, users still get the same error.  I'm going to restart IIS.  I had only restarted the particular web page but that didn't do anything.
 
0
 
60MXGCommented:
I remembered last time I had similar problem.  The way I solved the problem is create a new user group then add all the people who suppose to use the application into that group.
0
 
megninAuthor Commented:
I'll try that.
I just went to another users computer and still can't access \\INTRASERVE\E$ without entering my domain admin password
0
 
megninAuthor Commented:
Can I add "Everyone" to the group?
0
 
60MXGCommented:
I think that is not a good idea based from Microsoft because this is a security issue which might allow malaware to execute the code.  I would just create a new user group then add those users into the group.  You grant the permission to that particular group into the folders.  Much safer!  I know it is a little pain on the butt but it is a better practice!
0
 
megninAuthor Commented:
I created a group called IntranetUsers, but "DomainUsers" in it and granted the group Read & Execute permissions to the folder where the application is located.
 
No dice.  Something must be broke.
0
 
megninAuthor Commented:
I have to go home.  They are locking up the building.  I'll check back in the morning.
0
 
megninAuthor Commented:
This is in the list of other user accounts:
S-1-5-21-691920830-41263507-2527172458-1024
what is that?
0
 
60MXGCommented:
remove that user account!  This could be an account has been removed from the domain!
0
 
megninAuthor Commented:
I added "Authenticated Users" with Read & Execute to both the E$ drive and the file itself.  Nothing worked.  So, I just moved the publish point to a share on a different server.  \\DIFFERENTSERVER\SomeFolder\
Piece-O-Crap!  ;-)
It works fine from the new location.  
 
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 14
  • 10
Tackle projects and never again get stuck behind a technical roadblock.
Join Now