asked on

Access to path denied to Intranet users trying to install "One Click" Published application

I've published a Windows app to our Intranet with Visual Studio 2008. When someone clicks the "Install" button on the publish web page they get this error

Cannot retrieve application. Authentication Error. with the detail below.

When I select the Properties of the folder and look in the Security tab I see "Administrators (INTRASERVE\Administrators)" with "Full Control".
ASP.NET Machine Account (INTRASERVE\ASPNET) with all permissions allowed except "Full Control"
Everyone with "Full Control"
IIS_WPG (INTRASERVE\IIS_WPG) with Full Control

INTERACTIVE with only "List Folder Contents"
Internet Guest Account (INTRASERVE\IUSR_INTRASER... with Read and Write only
NETWORK with List Folder Contents only
NETWORK SERVICE with List Folder Contents only
S-1-5-21-691920830-41263507-2527172458-1024 with List Folder Contenents only
SYSTEM with Full Control
and Users (INTRASERVE\Users) with "Read & Execute", "List Folder Contents" and "Read" permissions set.

Another "Domain Admin" user and myself can launch the application with no problems.

Any ideas where the problem may lie?

SOURCES
            Deployment url                          : http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application
                                                                        Server              : Microsoft-IIS/6.0
                                                                        X-Powered-By   : ASP.NET
            Deployment Provider url             : file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application

ERROR SUMMARY
            Below is a summary of the errors, details of these errors are listed later in the log.
            * Activation of http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application resulted in exception. Following failure messages were detected:
                        + Downloading file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application did not succeed.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

Open in new window

60MXG

The physical folder need to assign the permission not just the IIS setting!

60MXG

Try to assign the permission with interactive users/Network users with "Read & Execute" permission!

David Megnin

ASKER

This is odd. The application used to work for everyone.
I remoted into the server and set the permissions on the physical folder to Read & Execute to nearly every user intity listed. Users are still getting the "Cannot retrieve application. Authentication Error" error.

60MXG

Did you check the physical file permission "WorkForceOneSignature.application"?

David Megnin

ASKER

Here is the full details of the error:

PLATFORM VERSION INFO
            Windows                                 : 5.1.2600.131072 (Win32NT)
            Common Language Runtime    : 2.0.50727.832
            System.Deployment.dll                       : 2.0.50727.832 (QFE.050727-8300)
            mscorwks.dll                           : 2.0.50727.832 (QFE.050727-8300)
            dfdll.dll                                   : 2.0.50727.42 (RTM.050727-4200)
            dfshim.dll                                : 2.0.50727.42 (RTM.050727-4200)

SOURCES
            Deployment url                                    : http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application
                                                                        Server             : Microsoft-IIS/6.0
                                                                        X-Powered-By            : ASP.NET
            Deployment Provider url                     : file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application

ERROR SUMMARY
            Below is a summary of the errors, details of these errors are listed later in the log.
            * Activation of http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application resulted in exception. Following failure messages were detected:
                        + Downloading file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application did not succeed.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        + Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

COMPONENT STORE TRANSACTION FAILURE SUMMARY
            No transaction error was detected.

WARNINGS
            There were no warnings during this operation.

OPERATION PROGRESS STATUS
            * [12/30/2009 4:17:54 PM] : Activation of http://intraserve.wf1broward.com/DOCS/WorkForceOneSignature/WorkForceOneSignature.application has started.

ERROR DETAILS
            Following errors were detected during this operation.
            * [12/30/2009 4:17:54 PM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
                        - Downloading file://intraserve/e$/Inetpub/Intranet/DOCS/WorkForceOneSignature/WorkForceOneSignature.application did not succeed.
                        - Source: System.Deployment
                        - Stack trace:
                                    at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
                                    at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
                                    at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
                                    at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
                                    at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirect(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
                                    at System.Deployment.Application.DownloadManager.FollowDeploymentProviderUri(SubscriptionStore subStore, AssemblyManifest& deployment, Uri& sourceUri, TempFile& tempFile, IDownloadNotification notification, DownloadOptions options)
                                    at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
                                    at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut)
                                    at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
                        --- Inner Exception ---
                        System.Net.WebException
                        - Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        - Source: System
                        - Stack trace:
                                    at System.Net.FileWebRequest.EndGetResponse(IAsyncResult asyncResult)
                                    at System.Net.FileWebRequest.GetResponse()
                                    at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
                        --- Inner Exception ---
                        System.Net.WebException
                        - Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        - Source: System
                        - Stack trace:
                                    at System.Net.FileWebResponse..ctor(FileWebRequest request, Uri uri, FileAccess access, Boolean asyncHint)
                                    at System.Net.FileWebRequest.GetResponseCallback(Object state)
                        --- Inner Exception ---
                        System.UnauthorizedAccessException
                        - Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.
                        - Source: mscorlib
                        - Stack trace:
                                    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
                                    at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
                                    at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, Boolean useAsync)
                                    at System.Net.FileWebStream..ctor(FileWebRequest request, String path, FileMode mode, FileAccess access, FileShare sharing, Int32 length, Boolean async)
                                    at System.Net.FileWebResponse..ctor(FileWebRequest request, Uri uri, FileAccess access, Boolean asyncHint)

COMPONENT STORE TRANSACTION DETAILS
            No transaction information is available.

Open in new window

David Megnin

ASKER

I just checked the physical file permissions on "WorkforceOneSignature.application" they are almost all set to "Read & Execute" at least just like the folder permissions.

60MXG

Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

is telling you that "WorkForceOneSignature.application" application is denied -- use your mouse and right click on this "WorkForceOneSignature.application" file and check the permission to see if everyone can excute it. Do you have antivirus/firewall running at your server? Check the setting on the antivirus and firewall too!

David Megnin

ASKER

It works fine for everyone in the IT department just not for regular users.

60MXG

Create a user group called "Application User" or something like that and then add regular users into that group! the grant "Application User" group permission with "Read and Execute" permission Or maybe you need to grant "Anynomous Users" with Read and Execute permission.

David Megnin

ASKER

>>Access to the path '\\intraserve\e$\Inetpub\Intranet\DOCS\WorkForceOneSignature\WorkForceOneSignature.application' is denied.

"Everyone" is set to "Full Control"
INTERACTIVE is set to "Read & Execute"
NETWORK is "Read & Execute"
NETWORK SERVICE I just added "Read & Execute", I'll go test a user again...

60MXG

Maybe stop IIS 6.0 then refresh/restart IIS just to release memory from the server.

David Megnin

ASKER

I'll try that. It seems odd that this thing use to work find for everyone, even outside our network, people working from home and such. I hope it just needs to be reset, I can't think of anything that has changed.

60MXG

Have you done any patches on the server lately? The patch might fixed some of the security loopholes that remove the "anonymous user" from your original setting.

David Megnin

ASKER

I just went to a users computer and tried to browse to the folder and got stopped for a username and password at the e$ drive where inetpub is located. I just went back to the server and set "Everyone" to Read & Execute. I'll see if that was the problem.
I'll ask our network analyst if he's done any patches. We are installing the Microsoft Updates all the time though.

David Megnin

ASKER

Well after setting "Everyone" to Read & Execute with "Apply To" This folder, subfolders and files, users still get the same error. I'm going to restart IIS. I had only restarted the particular web page but that didn't do anything.

60MXG

I remembered last time I had similar problem. The way I solved the problem is create a new user group then add all the people who suppose to use the application into that group.

David Megnin

ASKER

I'll try that.
I just went to another users computer and still can't access \\INTRASERVE\E$ without entering my domain admin password

David Megnin

ASKER

Can I add "Everyone" to the group?

60MXG

I think that is not a good idea based from Microsoft because this is a security issue which might allow malaware to execute the code. I would just create a new user group then add those users into the group. You grant the permission to that particular group into the folders. Much safer! I know it is a little pain on the butt but it is a better practice!

David Megnin

ASKER

I created a group called IntranetUsers, but "DomainUsers" in it and granted the group Read & Execute permissions to the folder where the application is located.

No dice. Something must be broke.

David Megnin

ASKER

I have to go home. They are locking up the building. I'll check back in the morning.

David Megnin

ASKER

This is in the list of other user accounts:
S-1-5-21-691920830-41263507-2527172458-1024
what is that?

60MXG

remove that user account! This could be an account has been removed from the domain!

ASKER CERTIFIED SOLUTION

David Megnin

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Access to path denied to Intranet users trying to install &quot;One Click&quot; Published application

Access to path denied to Intranet users trying to install "One Click" Published application