Groups > Web Hosting > Web Hosting with IIS and ASP dotNET > Re: Delete/Create Virtuals on IIS - Access Denied Error




Delete/Create Virtuals on IIS - Access Denied Error

Delete/Create Virtuals on IIS - Access Denied Error
Fri, 29 Feb 2008 19:42:19 +000
Team, I'm sure this question has already been asked before - if so please direct
me to the thread. 

I'm trying to create and delete virtual directories in IIS via a web app.
Everything works fine locally, but when I try to run this on app on a different
server I get an Access is Denied error. I've done the obvious things like:

1) Turning on Windows Authentication

2) Disabling Anonymous Access to the webs application

3) Using Identity Impersonation (via web.config settings)

But still no luck. It seems like the process identity (aspnet) gets used for
creating/deleting the virtuals which obviously won't work (unless I give this
account rights to delete or create the virtuals - which I don't want to do). Is
there anyway I can execute the delete/create functionality using the identity of
the user authenticated to use this page?
Post Reply
Re: Delete/Create Virtuals on IIS - Access Denied Error
Sat, 1 Mar 2008 00:19:02 +0000
Create a newgroup and give this group permission to create and delete folder
under IIS virture path.

Add all win users you need to do this create/delete job to this newgroup and it
will solve your problem

Hope it can help you
Post Reply
Re: Delete/Create Virtuals on IIS - Access Denied Error
Wed, 5 Mar 2008 21:04:03 +0000
tony thanks for the idea. it sounds like it shoudl work. If you dont mind
answering another question - how do I make my application run under the context
of a particular group? I already know which group has access to perform this
function, but I cannot get hold of any "service account" that belongs
to this group to run the appilcation under. Any idea on how I can make the app
run under the context of a particular group?
Post Reply
Re: Delete/Create Virtuals on IIS - Access Denied Error
Wed, 5 Mar 2008 21:15:08 +0000
You can get user role or groups from ADS, so from there, you can allow the user
do db connection or not.

See how to query Active Directory url

http://www.willasrari.com/blog/query-active-directory-users-using-c/000133.aspx

Post Reply
about | contact