|
Home > Archive > IIS Server Security > September 2004 > File WRITE permissions in IIS 5.1/XP SP2
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
File WRITE permissions in IIS 5.1/XP SP2
|
|
|
| I have Windows XP installed on my home computer, and am
using it for website development. I had the "site" set up
for anonymous authentication. I recently upgraded to
Windows XP SP2, and it looks like I also got upgraded to
IIS 5.1 in the process.
After I upgraded, IIS was actually not working correctly,
so I uninstalled and reinstalled it. It now appears to be
processing ASP scripts correctly, and can read from a
database I'm using. However, when I try to WRITE to the
database I get an ASP error message saying the DB is read-
only.
When I use the iis.msc snap-in for the MMC, I configure
the folder and file I'm trying to write to to allow write
access. But there seems to be a disconnect with setting
the NTFS permissions in XP SP2. When I go to explorer and
open the "permissions" dialog box for the folder,
the "read-only" checkbox has a checkmark in it that is
grey, not black (like only part of the folder's contents
are read-only). I can deselect the checkbox (i.e.,
control is not disabled) and choose to apply the new
settings to all the files in the directory, then
cliick "OK", but when I re-open the properties dialog the
checkbox has the grey check in it again.
In addition, XP SP2 has a "Web Security" tab that has the
same security settings you see in the iis.msc snap-in.
But the settings don't necessarily match those you see/set
in MMC. I've tried setting these to match the MMC
settings, but that didn't work.
I'm guessing that XP somehow changed the permissions
provided to the IUSR_<servername> anonymous guest account,
but not sure how to reset them. The security settings in
XP SP2 are totally different than they used to be.
Bottom line: I've got a file that I'm trying to write to,
but all the new security in SP2 is making it difficult to
even allow that. I know others have figured this out by
now... what am I missing?
Thanks in advance!
| |
| Jeff Cochran 2004-09-22, 9:26 pm |
| On Tue, 21 Sep 2004 08:49:20 -0700, "Joel"
<anonymous@discussions.microsoft.com> wrote:
>I have Windows XP installed on my home computer, and am
>using it for website development. I had the "site" set up
>for anonymous authentication. I recently upgraded to
>Windows XP SP2, and it looks like I also got upgraded to
>IIS 5.1 in the process.
Nope. XP is IIS 5.1, always has been.
>After I upgraded, IIS was actually not working correctly,
>so I uninstalled and reinstalled it. It now appears to be
>processing ASP scripts correctly, and can read from a
>database I'm using. However, when I try to WRITE to the
>database I get an ASP error message saying the DB is read-
>only.
Full error messages please. Likely along this line:
Why do I get database-related 80004005 errors?
http://www.aspfaq.com/show.asp?id=2009
Jeff
>When I use the iis.msc snap-in for the MMC, I configure
>the folder and file I'm trying to write to to allow write
>access. But there seems to be a disconnect with setting
>the NTFS permissions in XP SP2. When I go to explorer and
>open the "permissions" dialog box for the folder,
>the "read-only" checkbox has a checkmark in it that is
>grey, not black (like only part of the folder's contents
>are read-only). I can deselect the checkbox (i.e.,
>control is not disabled) and choose to apply the new
>settings to all the files in the directory, then
>cliick "OK", but when I re-open the properties dialog the
>checkbox has the grey check in it again.
>
>In addition, XP SP2 has a "Web Security" tab that has the
>same security settings you see in the iis.msc snap-in.
>But the settings don't necessarily match those you see/set
>in MMC. I've tried setting these to match the MMC
>settings, but that didn't work.
>
>I'm guessing that XP somehow changed the permissions
>provided to the IUSR_<servername> anonymous guest account,
>but not sure how to reset them. The security settings in
>XP SP2 are totally different than they used to be.
>
>Bottom line: I've got a file that I'm trying to write to,
>but all the new security in SP2 is making it difficult to
>even allow that. I know others have figured this out by
>now... what am I missing?
>
>Thanks in advance!
| |
|
| Thanks for the link. After filtering thu it, I found a
MUCH easier solution...
The error I was getting was "Microsoft OLE DB Provider for
ODBC Drivers (0x80004005)
[Microsoft][ODBC Microsoft Access Driver] Cannot update.
Database or object is read-only."
I knew it was because the folder's write permissions were
not set in the NTFS system correctly, but couldn't figure
out what XP SP2 had done to change the way these were
set. Turns out that in the Explorer/ Tool Menu / Folder
Options dialog box it had turned on the "Use Simple File
Sharing" checkbox. I uncliked this, went back to the
folder's properties dialog box, and now a "Security" tab
(the one I'm used to using from past experience) shows up
that lets you pick and choose exactly what permissions
you're trying to set for the folder for each user. Didn't
have to mess with setting up an alias on the "Web Sharing"
tab. Just used IIS.MSC.
For future readers, the following link helped:
http://www.aspfaq.com/show.asp?id=2205
Thanks again!
Joel
>-----Original Message-----
>On Tue, 21 Sep 2004 08:49:20 -0700, "Joel"
><anonymous@discussions.microsoft.com> wrote:
>
up[vbcol=seagreen]
>
>Nope. XP is IIS 5.1, always has been.
>
correctly,[vbcol=seagreen]
be[vbcol=seagreen]
read-[vbcol=seagreen]
>
>Full error messages please. Likely along this line:
>
>Why do I get database-related 80004005 errors?
>http://www.aspfaq.com/show.asp?id=2009
>
>Jeff
>
write[vbcol=seagreen]
and[vbcol=seagreen]
the[vbcol=seagreen]
the[vbcol=seagreen]
see/set[vbcol=seagreen]
account,[vbcol=seagreen]
in[vbcol=seagreen]
to,[vbcol=seagreen]
to[vbcol=seagreen]
>
>.
>
|
|
|
|
|