Solved

accessing an rdp file from a classic asp site

Posted on 2014-02-04
24
403 Views
Last Modified: 2014-02-04
I'm trying to keep an old asp site working for just a bit longer.
I have a link that points to an RDP file, presumably it used to work, but it doesn't any longer...

I simply get:  Internet Explorer cannot display the webpage

Is there an easy, albeit temporary fix, that I can apply to allow a remote desktop connection to a few servers?
0
Comment
Question by:sirbounty
  • 14
  • 10
24 Comments
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
do you have friendly error messages turned off in the browser? if so, I would suggest looking in your IIS logs for a more detailed error message that you can work off of.
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
All I see in the log file is

2014-02-04 13:39:07 ww.xx.yy.zz 60115 ww.xx.yyy.zzz 80 HTTP/1.1 OPTIONS /e$/Inetpub/folderpath/filename.rdp 400 - Hostname -


Doesn't seem to explain much - but not certain this is the correct log file either...
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
has anything changed since the last time it worked (windows update maybe)? Is it possible for you to test it in another browser? permissions change? upgraded browser?

it's really hard to determine what the issue without a more descriptive error message (something not common with MS!)
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
The path appears to be correct when the error appears in IE though.

However, if I copy/paste it into my start/run box, I don't have access.
Yet browsing to the site (via the alias) does prompt me for the appropriate credentials that will have access...

Yet again, I have a cmd session open with those same working credentials and when I try to initiate a
start \\pathtotheRDPfile
that is displayed in the browser, I do get a popup that states my credentials are needed because of a potential problem that may compromise security.


As far as when it worked - I've no idea.  I just started this job and was asked to take a look. :\
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
I also tried via a sub routine to create a shell and launch mstsc pointing to the server, but that was failing with an error creating the activex object...
0
 
LVL 32

Accepted Solution

by:
Big Monty earned 500 total points
Comment Utility
ugh, that stinks...i was never a fan of that, being the "new guy" at work and asked to look into something when no one knows anything about it :)

as a test, try assigning permissions to the folder that contains the RDP file and make sure "Everyone" has access. If this works, then you know permissions is the issue, and you can adjust them to fit your environment
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Hmm - that's probably not a bad idea...
I'll have to do some digging.  Can't add 'everyone', but I think I can add those that should have access.
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
for testing purposes, try adding your account (if you're able to) and if that works, then you can start adding other people.
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
I'm actually in a group that has access (frowned upon to add individual accounts -bad move on the new team ;^).

And I checked effective permissions - I have list,read, & execute (full control for my priveledged account).

I even created a hidden share to point to the inetpub\web page folder (everyone/full control on the share), but sadly it's still not working. :(
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
hmmm, I'm afraid I don't have any other things to try, hopefully another expert comes along and suggests something else.

Good Luck!
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Thanks for the help nonetheless. :^)
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Hmm - mapping to the drive using the limited account, I can't see any files.
I think there's still some permission problem somewhere...
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 67

Author Comment

by:sirbounty
Comment Utility
I think you were right on...works when adding my individual ID.

But I am in the group that has the same access.
From a cacls on that folder:

DOMAIN\MyID:(OI)(CI)R
DOMAIN\GroupName:(OI)(CI)R

Hmmm
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
that is strange!

Does the group name have permissions to the site from within IIS (I forget where in IIS that's set, but I'm pretty positive that is an option)?
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Will take me a bit to locate that too, however I'm certain my limited account would not be there?
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
probably not, but you may have elevated privileges over the group.

I'm just throwing out ideas, this is a tough one to troubleshoot :)
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Got to be something in iis though.  I gave full control to that group and I still can't view the folder remotely from a cmd prompt. :\
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
certainly sounds like it is. play around with it and post your answer once you find it, I'm  curious now what the resolution is :)
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
I can't exactly play with it and not cause problems, so I created a temporary share on the root of the drive.
I added the group with read/execute permissions and I can't see it.
I add my account, and I can.
I don't get it...
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Even setting the group with full control I can't see anything.
Effective perms show that my account has full control.  Arg...
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
how did you get it to work earlier then? I thought you explicitly added your account and it worked.

off to lunch, be back in a bit
0
 
LVL 67

Author Comment

by:sirbounty
Comment Utility
Yep, adding my account, even with r/x, it works.
Adding the group that I'm a member of, even with full control, does not.
0
 
LVL 32

Expert Comment

by:Big Monty
Comment Utility
so it looks pretty much like a access rights issue. What are the differences in permissions in what you have and what that group has? Do you belong to any other groups with elevated permissions?

can you create another group, assign it the proper permissions, then add the necessary people to that group?
0
 
LVL 67

Author Closing Comment

by:sirbounty
Comment Utility
Appears it was simply permissions.
I wasn't getting an updated access to the group because I wasn't logging off first (doh!)
Thanks for the help.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

Do you want to insert HTML5 video into your site? This is the tutorial how to do so. What are the main advantages of HTML5 video? 1) Have good compression, good image quality, and low decode processor use. 2) It is royalty-free 3) It is easi…
This article demonstrates how to create a simple responsive confirmation dialog with Ok and Cancel buttons using HTML, CSS, jQuery and Promises
In this tutorial viewers will learn how to style elements, such a divs, with a "drop shadow" effect using the CSS box-shadow property Start with a normal styled element, such as a div.: In the element's style, type the box shadow property: "box-shad…
The viewer will the learn the benefit of plain text editors and code an HTML5 based template for use in further tutorials.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now