Solved

Windows 2008 IIS7 - /.net App / - mapped folder, write permission ?

Posted on 2011-09-12
8
298 Views
Last Modified: 2012-06-27
Hi Experts,

I'm running a .net application on Windows 2008 R2/IIS7 and this application should be able to upload and read files on a mapped folder from some other server under the same domain.

A file can be only uploaded when "Everyone" given with full permission. But I think it's not a secure way for a production environment. (I have tried giving "Network Service" full permission bit it's only allow for me to read a already uploaded file but I can't do any new uploading.)

Can you please advice with me on how to change the permission to work IIS correctly/securely  ?

Thanks a lot for your time !
0
Comment
Question by:Shakthi777
8 Comments
 
LVL 17

Accepted Solution

by:
Rovastar earned 375 total points
ID: 36527725
What happens when your try and upload these files? error? messages?

Procmon will tell you what has failed with permission issues
http://technet.microsoft.com/en-us/sysinternals/bb896645

try on the both servers to get a picture of this.
0
 
LVL 16

Assisted Solution

by:Easwaran Paramasivam
Easwaran Paramasivam earned 125 total points
ID: 36527735
0
 

Author Comment

by:Shakthi777
ID: 36528219
thanks for your comments the error I'm getting is;

System.UnauthorizedAccessException: Access to the path '\\192.168.22.3\folder 111\subone\file_1.txt' is denied.
0
 
LVL 11

Expert Comment

by:Sanjay Santoki
ID: 36530639
Hello,

Please be sure that you have Shared & NTFS write permission on this shared folder for application pool identity user and anonymous user.

Thanks,
Sanjay Santoki
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 17

Assisted Solution

by:Rovastar
Rovastar earned 375 total points
ID: 36531520
Yes you will need the app pool identity user but as network services from the client machine (in this case the initial IIS server)

better still try a dedicated user of that machine or if in a domain try a domian user. This should clear up any confusion.

If still a problem use procmon to look at see the real time permissions and access on the end server.

http://technet.microsoft.com/en-us/sysinternals/bb896645
0
 

Author Comment

by:Shakthi777
ID: 36533948
I didn't get "app pool identity user" can you please explain ....

thanks for your time  !
0
 
LVL 17

Assisted Solution

by:Rovastar
Rovastar earned 375 total points
ID: 36534357
0
 

Author Closing Comment

by:Shakthi777
ID: 36597444
tnx guys... ! I added "NETWORK" and then it's working fine.
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Join & Write a Comment

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now