IIS Server Security - BC31019: Unable to write to output file

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2006 > BC31019: Unable to write to output file





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author BC31019: Unable to write to output file
MN

2006-01-24, 6:10 pm

My asp.net application works perfectly in IIS 5.0 with Windows 2000, but
since its been deployed on Windows 2003 server with IIS 6.0 I have started
getting following error on most of the pages

"Compiler Error Message: BC31019: Unable to write to output file
'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"

I have provided full access rights to network_services, aspnet account..
Can anybody help me??
Ken Schaefer

2006-01-24, 8:56 pm

You have provided full rights for the Network Service account to what,
exactly?

Cheers
Ken


"MN" <MN@discussions.microsoft.com> wrote in message
news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
: My asp.net application works perfectly in IIS 5.0 with Windows 2000, but
: since its been deployed on Windows 2003 server with IIS 6.0 I have started
: getting following error on most of the pages
:
: "Compiler Error Message: BC31019: Unable to write to output file
: 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
: Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"
:
: I have provided full access rights to network_services, aspnet account..
: Can anybody help me??


MN

2006-01-24, 8:56 pm

full control has been provided to network service account

"Ken Schaefer" wrote:

> You have provided full rights for the Network Service account to what,
> exactly?
>
> Cheers
> Ken
>
>
> "MN" <MN@discussions.microsoft.com> wrote in message
> news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
> : My asp.net application works perfectly in IIS 5.0 with Windows 2000, but
> : since its been deployed on Windows 2003 server with IIS 6.0 I have started
> : getting following error on most of the pages
> :
> : "Compiler Error Message: BC31019: Unable to write to output file
> : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"
> :
> : I have provided full access rights to network_services, aspnet account..
> : Can anybody help me??
>
>
>

Ken Schaefer

2006-01-24, 8:56 pm

You've given the Network Service account full control to __________?

Cheers
Ken


"MN" <MN@discussions.microsoft.com> wrote in message
news:F1951736-FBAE-4267-8537-4D28808A4091@microsoft.com...
: full control has been provided to network service account
:
: "Ken Schaefer" wrote:
:
: > You have provided full rights for the Network Service account to what,
: > exactly?
: >
: > Cheers
: > Ken
: >
: >
: > "MN" <MN@discussions.microsoft.com> wrote in message
: > news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
: > : My asp.net application works perfectly in IIS 5.0 with Windows 2000,
but
: > : since its been deployed on Windows 2003 server with IIS 6.0 I have
started
: > : getting following error on most of the pages
: > :
: > : "Compiler Error Message: BC31019: Unable to write to output file
: > : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
: > : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"
: > :
: > : I have provided full access rights to network_services, aspnet
account..
: > : Can anybody help me??
: >
: >
: >


MN

2006-01-25, 8:37 am

I am not able to understand what you are trying to ask but let me explain you:

IIS 6.0 has an account called network_services this account is responsibile
for accessing the WINDOWS TEMP folder which is required during application
runs. prior to IIS 6 this job was done by aspnet account. Hence I have
provided network_services account full rights to WINDOWS TEMP folder. Hope
this make some sense.

"Ken Schaefer" wrote:

> You've given the Network Service account full control to __________?
>
> Cheers
> Ken
>
>
> "MN" <MN@discussions.microsoft.com> wrote in message
> news:F1951736-FBAE-4267-8537-4D28808A4091@microsoft.com...
> : full control has been provided to network service account
> :
> : "Ken Schaefer" wrote:
> :
> : > You have provided full rights for the Network Service account to what,
> : > exactly?
> : >
> : > Cheers
> : > Ken
> : >
> : >
> : > "MN" <MN@discussions.microsoft.com> wrote in message
> : > news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
> : > : My asp.net application works perfectly in IIS 5.0 with Windows 2000,
> but
> : > : since its been deployed on Windows 2003 server with IIS 6.0 I have
> started
> : > : getting following error on most of the pages
> : > :
> : > : "Compiler Error Message: BC31019: Unable to write to output file
> : > : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> : > : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"
> : > :
> : > : I have provided full access rights to network_services, aspnet
> account..
> : > : Can anybody help me??
> : >
> : >
> : >
>
>
>

Ken Schaefer

2006-01-29, 9:29 pm

That's what I was asking - what *resource* (e.g. folder) did you give
Network Service permission to.

a) You need to determine what process ASP.NET is running under. By default
this is Network Service, but if you have changed the Web App Pool's
identity, then ASP.NET will be running under a different user context

b) The Windows Temp folder is c:\windows\temp. That is not the folder you
need to give permissions to. You need to give permissions to
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files
Ensure that the permissions apply to all child folders and files (a checkbox
under the "advanced" button)

Cheers
Ken



"MN" <MN@discussions.microsoft.com> wrote in message
news:A259DF66-1E0A-4C2F-A2C6-83BE9143366B@microsoft.com...
:I am not able to understand what you are trying to ask but let me explain
you:
:
: IIS 6.0 has an account called network_services this account is
responsibile
: for accessing the WINDOWS TEMP folder which is required during application
: runs. prior to IIS 6 this job was done by aspnet account. Hence I have
: provided network_services account full rights to WINDOWS TEMP folder. Hope
: this make some sense.
:
: "Ken Schaefer" wrote:
:
: > You've given the Network Service account full control to __________?
: >
: > Cheers
: > Ken
: >
: >
: > "MN" <MN@discussions.microsoft.com> wrote in message
: > news:F1951736-FBAE-4267-8537-4D28808A4091@microsoft.com...
: > : full control has been provided to network service account
: > :
: > : "Ken Schaefer" wrote:
: > :
: > : > You have provided full rights for the Network Service account to
what,
: > : > exactly?
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : >
: > : > "MN" <MN@discussions.microsoft.com> wrote in message
: > : > news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
: > : > : My asp.net application works perfectly in IIS 5.0 with Windows
2000,
: > but
: > : > : since its been deployed on Windows 2003 server with IIS 6.0 I have
: > started
: > : > : getting following error on most of the pages
: > : > :
: > : > : "Compiler Error Message: BC31019: Unable to write to output file
: > : > : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
: > : > : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"
: > : > :
: > : > : I have provided full access rights to network_services, aspnet
: > account..
: > : > : Can anybody help me??
: > : >
: > : >
: > : >
: >
: >
: >


MN

2006-01-29, 9:29 pm

thanx Ken..but this folder is already having all permission for network
services account


"Ken Schaefer" wrote:

> That's what I was asking - what *resource* (e.g. folder) did you give
> Network Service permission to.
>
> a) You need to determine what process ASP.NET is running under. By default
> this is Network Service, but if you have changed the Web App Pool's
> identity, then ASP.NET will be running under a different user context
>
> b) The Windows Temp folder is c:\windows\temp. That is not the folder you
> need to give permissions to. You need to give permissions to
> C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files
> Ensure that the permissions apply to all child folders and files (a checkbox
> under the "advanced" button)
>
> Cheers
> Ken
>
>
>
> "MN" <MN@discussions.microsoft.com> wrote in message
> news:A259DF66-1E0A-4C2F-A2C6-83BE9143366B@microsoft.com...
> :I am not able to understand what you are trying to ask but let me explain
> you:
> :
> : IIS 6.0 has an account called network_services this account is
> responsibile
> : for accessing the WINDOWS TEMP folder which is required during application
> : runs. prior to IIS 6 this job was done by aspnet account. Hence I have
> : provided network_services account full rights to WINDOWS TEMP folder. Hope
> : this make some sense.
> :
> : "Ken Schaefer" wrote:
> :
> : > You've given the Network Service account full control to __________?
> : >
> : > Cheers
> : > Ken
> : >
> : >
> : > "MN" <MN@discussions.microsoft.com> wrote in message
> : > news:F1951736-FBAE-4267-8537-4D28808A4091@microsoft.com...
> : > : full control has been provided to network service account
> : > :
> : > : "Ken Schaefer" wrote:
> : > :
> : > : > You have provided full rights for the Network Service account to
> what,
> : > : > exactly?
> : > : >
> : > : > Cheers
> : > : > Ken
> : > : >
> : > : >
> : > : > "MN" <MN@discussions.microsoft.com> wrote in message
> : > : > news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
> : > : > : My asp.net application works perfectly in IIS 5.0 with Windows
> 2000,
> : > but
> : > : > : since its been deployed on Windows 2003 server with IIS 6.0 I have
> : > started
> : > : > : getting following error on most of the pages
> : > : > :
> : > : > : "Compiler Error Message: BC31019: Unable to write to output file
> : > : > : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> : > : > : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is denied"
> : > : > :
> : > : > : I have provided full access rights to network_services, aspnet
> : > account..
> : > : > : Can anybody help me??
> : > : >
> : > : >
> : > : >
> : >
> : >
> : >
>
>
>

Ken Schaefer

2006-01-29, 9:29 pm

OK, can you verify other permissions?
http://support.microsoft.com/?kbid=812614

Cheers
Ken


"MN" <MN@discussions.microsoft.com> wrote in message
news:951EB3DA-0C65-403A-B024-1C0E659C65C1@microsoft.com...
: thanx Ken..but this folder is already having all permission for network
: services account
:
:
: "Ken Schaefer" wrote:
:
: > That's what I was asking - what *resource* (e.g. folder) did you give
: > Network Service permission to.
: >
: > a) You need to determine what process ASP.NET is running under. By
default
: > this is Network Service, but if you have changed the Web App Pool's
: > identity, then ASP.NET will be running under a different user context
: >
: > b) The Windows Temp folder is c:\windows\temp. That is not the folder
you
: > need to give permissions to. You need to give permissions to
: > C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files
: > Ensure that the permissions apply to all child folders and files (a
checkbox
: > under the "advanced" button)
: >
: > Cheers
: > Ken
: >
: >
: >
: > "MN" <MN@discussions.microsoft.com> wrote in message
: > news:A259DF66-1E0A-4C2F-A2C6-83BE9143366B@microsoft.com...
: > :I am not able to understand what you are trying to ask but let me
explain
: > you:
: > :
: > : IIS 6.0 has an account called network_services this account is
: > responsibile
: > : for accessing the WINDOWS TEMP folder which is required during
application
: > : runs. prior to IIS 6 this job was done by aspnet account. Hence I have
: > : provided network_services account full rights to WINDOWS TEMP folder.
Hope
: > : this make some sense.
: > :
: > : "Ken Schaefer" wrote:
: > :
: > : > You've given the Network Service account full control to __________?
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : >
: > : > "MN" <MN@discussions.microsoft.com> wrote in message
: > : > news:F1951736-FBAE-4267-8537-4D28808A4091@microsoft.com...
: > : > : full control has been provided to network service account
: > : > :
: > : > : "Ken Schaefer" wrote:
: > : > :
: > : > : > You have provided full rights for the Network Service account to
: > what,
: > : > : > exactly?
: > : > : >
: > : > : > Cheers
: > : > : > Ken
: > : > : >
: > : > : >
: > : > : > "MN" <MN@discussions.microsoft.com> wrote in message
: > : > : > news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
: > : > : > : My asp.net application works perfectly in IIS 5.0 with Windows
: > 2000,
: > : > but
: > : > : > : since its been deployed on Windows 2003 server with IIS 6.0 I
have
: > : > started
: > : > : > : getting following error on most of the pages
: > : > : > :
: > : > : > : "Compiler Error Message: BC31019: Unable to write to output
file
: > : > : > : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary
ASP.NET
: > : > : > : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is
denied"
: > : > : > :
: > : > : > : I have provided full access rights to network_services, aspnet
: > : > account..
: > : > : > : Can anybody help me??
: > : > : >
: > : > : >
: > : > : >
: > : >
: > : >
: > : >
: >
: >
: >


Ken Schaefer

2006-01-29, 9:29 pm

The other suggestion I have is getting FileMon from:
http://www.sysinternals.com/Utilities/Filemon.html
and that will tell you exactly what account is being denied access to what
file, and you can adjust permissions appropriately.

Cheers
Ken


"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:%23S%237UeuIGHA.2900@TK2MSFTNGP14.phx.gbl...
: OK, can you verify other permissions?
: http://support.microsoft.com/?kbid=812614
:
: Cheers
: Ken
:
:
: "MN" <MN@discussions.microsoft.com> wrote in message
: news:951EB3DA-0C65-403A-B024-1C0E659C65C1@microsoft.com...
:: thanx Ken..but this folder is already having all permission for network
:: services account
::
::
:: "Ken Schaefer" wrote:
::
:: > That's what I was asking - what *resource* (e.g. folder) did you give
:: > Network Service permission to.
:: >
:: > a) You need to determine what process ASP.NET is running under. By
: default
:: > this is Network Service, but if you have changed the Web App Pool's
:: > identity, then ASP.NET will be running under a different user context
:: >
:: > b) The Windows Temp folder is c:\windows\temp. That is not the folder
: you
:: > need to give permissions to. You need to give permissions to
:: > C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files
:: > Ensure that the permissions apply to all child folders and files (a
: checkbox
:: > under the "advanced" button)
:: >
:: > Cheers
:: > Ken
:: >
:: >
:: >
:: > "MN" <MN@discussions.microsoft.com> wrote in message
:: > news:A259DF66-1E0A-4C2F-A2C6-83BE9143366B@microsoft.com...
:: > :I am not able to understand what you are trying to ask but let me
: explain
:: > you:
:: > :
:: > : IIS 6.0 has an account called network_services this account is
:: > responsibile
:: > : for accessing the WINDOWS TEMP folder which is required during
: application
:: > : runs. prior to IIS 6 this job was done by aspnet account. Hence I
have
:: > : provided network_services account full rights to WINDOWS TEMP folder.
: Hope
:: > : this make some sense.
:: > :
:: > : "Ken Schaefer" wrote:
:: > :
:: > : > You've given the Network Service account full control to
__________?
:: > : >
:: > : > Cheers
:: > : > Ken
:: > : >
:: > : >
:: > : > "MN" <MN@discussions.microsoft.com> wrote in message
:: > : > news:F1951736-FBAE-4267-8537-4D28808A4091@microsoft.com...
:: > : > : full control has been provided to network service account
:: > : > :
:: > : > : "Ken Schaefer" wrote:
:: > : > :
:: > : > : > You have provided full rights for the Network Service account
to
:: > what,
:: > : > : > exactly?
:: > : > : >
:: > : > : > Cheers
:: > : > : > Ken
:: > : > : >
:: > : > : >
:: > : > : > "MN" <MN@discussions.microsoft.com> wrote in message
:: > : > : > news:A978D832-EC57-4770-B21B-8CAD237DDD38@microsoft.com...
:: > : > : > : My asp.net application works perfectly in IIS 5.0 with
Windows
:: > 2000,
:: > : > but
:: > : > : > : since its been deployed on Windows 2003 server with IIS 6.0 I
: have
:: > : > started
:: > : > : > : getting following error on most of the pages
:: > : > : > :
:: > : > : > : "Compiler Error Message: BC31019: Unable to write to output
: file
:: > : > : > : 'C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary
: ASP.NET
:: > : > : > : Files\sso_ems\65491ed5\6acedb70\e25yeosq
.dll': Access is
: denied"
:: > : > : > :
:: > : > : > : I have provided full access rights to network_services,
aspnet
:: > : > account..
:: > : > : > : Can anybody help me??
:: > : > : >
:: > : > : >
:: > : > : >
:: > : >
:: > : >
:: > : >
:: >
:: >
:: >
:
:


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com