accessing an rdp file from a classic asp site

do you have friendly error messages turned off in the browser? if so, I would suggest looking in your IIS logs for a more detailed error message that you can work off of.

All I see in the log file is

2014-02-04 13:39:07 ww.xx.yy.zz 60115 ww.xx.yyy.zzz 80 HTTP/1.1 OPTIONS /e$/Inetpub/folderpath/filename.rdp 400 - Hostname -

Doesn't seem to explain much - but not certain this is the correct log file either...

has anything changed since the last time it worked (windows update maybe)? Is it possible for you to test it in another browser? permissions change? upgraded browser?

it's really hard to determine what the issue without a more descriptive error message (something not common with MS!)

The path appears to be correct when the error appears in IE though.

However, if I copy/paste it into my start/run box, I don't have access.
Yet browsing to the site (via the alias) does prompt me for the appropriate credentials that will have access...

Yet again, I have a cmd session open with those same working credentials and when I try to initiate a
start \\pathtotheRDPfile
that is displayed in the browser, I do get a popup that states my credentials are needed because of a potential problem that may compromise security.


As far as when it worked - I've no idea.  I just started this job and was asked to take a look. :\

I also tried via a sub routine to create a shell and launch mstsc pointing to the server, but that was failing with an error creating the activex object...

Hmm - that's probably not a bad idea...
I'll have to do some digging.  Can't add 'everyone', but I think I can add those that should have access.

for testing purposes, try adding your account (if you're able to) and if that works, then you can start adding other people.

I'm actually in a group that has access (frowned upon to add individual accounts -bad move on the new team ;^).

And I checked effective permissions - I have list,read, & execute (full control for my priveledged account).

I even created a hidden share to point to the inetpub\web page folder (everyone/full control on the share), but sadly it's still not working. :(

hmmm, I'm afraid I don't have any other things to try, hopefully another expert comes along and suggests something else.

Good Luck!

Thanks for the help nonetheless. :^)

Hmm - mapping to the drive using the limited account, I can't see any files.
I think there's still some permission problem somewhere...

I think you were right on...works when adding my individual ID.

But I am in the group that has the same access.
From a cacls on that folder:

DOMAIN\MyID:(OI)(CI)R
DOMAIN\GroupName:(OI)(CI)R

Hmmm

that is strange!

Does the group name have permissions to the site from within IIS (I forget where in IIS that's set, but I'm pretty positive that is an option)?

Will take me a bit to locate that too, however I'm certain my limited account would not be there?

probably not, but you may have elevated privileges over the group.

I'm just throwing out ideas, this is a tough one to troubleshoot :)

Got to be something in iis though.  I gave full control to that group and I still can't view the folder remotely from a cmd prompt. :\

certainly sounds like it is. play around with it and post your answer once you find it, I'm  curious now what the resolution is :)

I can't exactly play with it and not cause problems, so I created a temporary share on the root of the drive.
I added the group with read/execute permissions and I can't see it.
I add my account, and I can.
I don't get it...

Even setting the group with full control I can't see anything.
Effective perms show that my account has full control.  Arg...

how did you get it to work earlier then? I thought you explicitly added your account and it worked.

off to lunch, be back in a bit

Yep, adding my account, even with r/x, it works.
Adding the group that I'm a member of, even with full control, does not.

so it looks pretty much like a access rights issue. What are the differences in permissions in what you have and what that group has? Do you belong to any other groups with elevated permissions?

can you create another group, assign it the proper permissions, then add the necessary people to that group?

Appears it was simply permissions.
I wasn't getting an updated access to the group because I wasn't logging off first (doh!)
Thanks for the help.