|
Home > Archive > IIS Server Security > July 2005 > Writing to a Virtual Directory
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Writing to a Virtual Directory
|
|
|
| I have a web app that receives XML, parses it, runs it against a
database, then sends this data back as XML.
When the file is received, a corresponding text file that contains the
data being received is created in a virtual directory.
This configuration runs fine in IIS 5.1 on XP Pro. But in the production
environment (Windows 2003 and IIS 6.0) the text files are not getting
created.
I have gone so far as to grant IUSR_machinename administrative
permissions on this Virtual directory (full control), but still no text
files are being written.
What permissions are needed to allow these text files to be created in
the Virtual directory?
| |
| Bernard Cheah [MVP] 2005-07-21, 2:48 am |
| Do you get any error msgs ? do a file auditing and see whether it failed.
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"GregP" <petersonga@mindspring.com> wrote in message
news:ZGGDe.1309$Uk3.1017@newsread1.news.pas.earthlink.net...
>I have a web app that receives XML, parses it, runs it against a database,
>then sends this data back as XML.
>
> When the file is received, a corresponding text file that contains the
> data being received is created in a virtual directory.
>
> This configuration runs fine in IIS 5.1 on XP Pro. But in the production
> environment (Windows 2003 and IIS 6.0) the text files are not getting
> created.
>
> I have gone so far as to grant IUSR_machinename administrative permissions
> on this Virtual directory (full control), but still no text files are
> being written.
>
> What permissions are needed to allow these text files to be created in the
> Virtual directory?
| |
|
| Bernard Cheah [MVP] wrote:
> Do you get any error msgs ? do a file auditing and see whether it failed.
>
No error messages. Nothing in the event logs either. I'll audit.
| |
|
| Bernard Cheah [MVP] wrote:
> Do you get any error msgs ? do a file auditing and see whether it failed.
>
Set up aduting on this folder. Nothing shows up in the security event
viewer.
Could there be an Active Directory issue preventing this app from even
attempting to write to the folder?
| |
| Bernard Cheah [MVP] 2005-07-24, 3:07 am |
| Nope. should be not related to AD. I suspect is permission setting that the
web application user does not has the privileges to do write the file. So,
get filemon (sysinternals.com) and see if you can trace what user is be use
to create the file and whether there's any problem with it.
Run it on the server, then simulate your web request again, then checkout
the filemon log.
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"GregP" <petersonga@mindspring.com> wrote in message
news:u_wEe.2874$Uk3.1791@newsread1.news.pas.earthlink.net...
> Bernard Cheah [MVP] wrote:
> Set up aduting on this folder. Nothing shows up in the security event
> viewer.
>
> Could there be an Active Directory issue preventing this app from even
> attempting to write to the folder?
| |
| Leon Mayne [MVP] 2005-07-24, 5:51 pm |
| GregP wrote:
> I have a web app that receives XML, parses it, runs it against a
> database, then sends this data back as XML.
>
> When the file is received, a corresponding text file that contains the
> data being received is created in a virtual directory.
>
> This configuration runs fine in IIS 5.1 on XP Pro. But in the
> production environment (Windows 2003 and IIS 6.0) the text files are
> not getting created.
>
> I have gone so far as to grant IUSR_machinename administrative
> permissions on this Virtual directory (full control), but still no
> text files are being written.
>
> What permissions are needed to allow these text files to be created in
> the Virtual directory?
Make sure the ASPNET account has write access to the directory if you're
using ASP.NET.
| |
|
| Leon Mayne [MVP] wrote:
> GregP wrote:
>
>
>
> Make sure the ASPNET account has write access to the directory if you're
> using ASP.NET.
>
>
| |
|
| Bernard Cheah [MVP] wrote:
> Nope. should be not related to AD. I suspect is permission setting that the
> web application user does not has the privileges to do write the file. So,
> get filemon (sysinternals.com) and see if you can trace what user is be use
> to create the file and whether there's any problem with it.
>
> Run it on the server, then simulate your web request again, then checkout
> the filemon log.
>
The FileMon revealed that when the app was installed, it was installed
in a different directory than the directory we have set IIS up to use. I
don't know how it has been able to work at all. FileMon reported that
the app was trying to write the log files to a directory that didn't exist.
Great little tool. Thanks for the help.
Now to figure out why this app is even able to run.
|
|
|
|
|