How to configure IIS 7 to use a built-in account

[Seigfried]

I'm learning ASP.NET (Yes, this IS an IIS question. I'm not in the wrong
group.) so I have installed IIS 7 on my Vista Business System. I'm not a
member of a domain. Everything is installed on a single computer.

The first lesson in the book I'm reading tells you to bring up their initial
.aspx web page to verify that everything has been installed and is working.
I've been bogged down on that for quite a while.

It IS working now, but in a mode that I do not understand. Here's what I
have done.

1 - The initial .aspx web page would not work with default installed
settings. In IIS Manager, using the Basic Setting Action, the Test Settings
button returned an Authorization error: "Cannot verify access to path".

"The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read
access to the physical path. Then test these settings again."

2 - Both the NetworkService Application Pool identity and the LocalSystem
Application Pool identity gave the same result above. I gave the IIS_IUSRS
group full control over the physical directory where the website files are
and it didn't make any difference. (I've changed it back now.)

3 - Finally, since I couldn't think of anything else to try and I wanted to
find out if IIS 7 actually did work, I created a new Administrator account,
with a password, and used the Connect As button to Set this Specific User.
THIS WORKED! The .aspx page came up. The Test Settings button returned
success.

My question is:

How do I configure IIS 7 so I can use a built-in account to run this app?

[Knapek Miroslav]

Hello,

the most of this problems are wrong folder permissions setting.
Check permission on folder where your aspx file is placed for NETWORK
SERVICE user.
Read permission must be enabled.

Miroslav

Post by Seigfried
I'm learning ASP.NET (Yes, this IS an IIS question. I'm not in the wrong
group.) so I have installed IIS 7 on my Vista Business System. I'm not a
member of a domain. Everything is installed on a single computer.
The first lesson in the book I'm reading tells you to bring up their initial
.aspx web page to verify that everything has been installed and is working.
I've been bogged down on that for quite a while.
It IS working now, but in a mode that I do not understand. Here's what I
have done.
1 - The initial .aspx web page would not work with default installed
settings. In IIS Manager, using the Basic Setting Action, the Test Settings
button returned an Authorization error: "Cannot verify access to path".
"The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read
access to the physical path. Then test these settings again."
2 - Both the NetworkService Application Pool identity and the LocalSystem
Application Pool identity gave the same result above. I gave the IIS_IUSRS
group full control over the physical directory where the website files are
and it didn't make any difference. (I've changed it back now.)
3 - Finally, since I couldn't think of anything else to try and I wanted to
find out if IIS 7 actually did work, I created a new Administrator account,
with a password, and used the Connect As button to Set this Specific User.
THIS WORKED! The .aspx page came up. The Test Settings button returned
success.
How do I configure IIS 7 so I can use a built-in account to run this app?

[Seigfried]

First, thank you for the reply.

Second, I did change the security for both NetworkService and LocalSystem to
the folder. I made them both "Read" and then "Full Control". It didn't work.

And I know that IIS actually does work because the new account I established
CAN browse the .aspx page. But no builtin accounts can.

Post by Knapek Miroslav
Hello,
the most of this problems are wrong folder permissions setting.
Check permission on folder where your aspx file is placed for NETWORK
SERVICE user.
Read permission must be enabled.
Miroslav

Post by Seigfried
I'm learning ASP.NET (Yes, this IS an IIS question. I'm not in the wrong
group.) so I have installed IIS 7 on my Vista Business System. I'm not a
member of a domain. Everything is installed on a single computer.
The first lesson in the book I'm reading tells you to bring up their initial
.aspx web page to verify that everything has been installed and is working.
I've been bogged down on that for quite a while.
It IS working now, but in a mode that I do not understand. Here's what I
have done.
1 - The initial .aspx web page would not work with default installed
settings. In IIS Manager, using the Basic Setting Action, the Test Settings
button returned an Authorization error: "Cannot verify access to path".
"The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read
access to the physical path. Then test these settings again."
2 - Both the NetworkService Application Pool identity and the LocalSystem
Application Pool identity gave the same result above. I gave the IIS_IUSRS
group full control over the physical directory where the website files are
and it didn't make any difference. (I've changed it back now.)
3 - Finally, since I couldn't think of anything else to try and I wanted to
find out if IIS 7 actually did work, I created a new Administrator account,
with a password, and used the Connect As button to Set this Specific User.
THIS WORKED! The .aspx page came up. The Test Settings button returned
success.
How do I configure IIS 7 so I can use a built-in account to run this app?

[Knapek Miroslav]

If web is running under admin account the problem must be in permissions.
Try another step: make Read permission for IUSR... enable.

HTH
Miroslav

Post by Seigfried
First, thank you for the reply.
Second, I did change the security for both NetworkService and LocalSystem to
the folder. I made them both "Read" and then "Full Control". It didn't work.
And I know that IIS actually does work because the new account I established
CAN browse the .aspx page. But no builtin accounts can.

Post by Knapek Miroslav
Hello,
the most of this problems are wrong folder permissions setting.
Check permission on folder where your aspx file is placed for NETWORK
SERVICE user.
Read permission must be enabled.
Miroslav

Post by Seigfried
I'm learning ASP.NET (Yes, this IS an IIS question. I'm not in the wrong
group.) so I have installed IIS 7 on my Vista Business System. I'm not a
member of a domain. Everything is installed on a single computer.
The first lesson in the book I'm reading tells you to bring up their initial
.aspx web page to verify that everything has been installed and is working.
I've been bogged down on that for quite a while.
It IS working now, but in a mode that I do not understand. Here's what I
have done.
1 - The initial .aspx web page would not work with default installed
settings. In IIS Manager, using the Basic Setting Action, the Test Settings
button returned an Authorization error: "Cannot verify access to path".
"The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$
has
Read
access to the physical path. Then test these settings again."
2 - Both the NetworkService Application Pool identity and the LocalSystem
Application Pool identity gave the same result above. I gave the IIS_IUSRS
group full control over the physical directory where the website files are
and it didn't make any difference. (I've changed it back now.)
3 - Finally, since I couldn't think of anything else to try and I
wanted
to
find out if IIS 7 actually did work, I created a new Administrator account,
with a password, and used the Connect As button to Set this Specific User.
THIS WORKED! The .aspx page came up. The Test Settings button returned
success.
How do I configure IIS 7 so I can use a built-in account to run this app?

[Seigfried]

I don't understand how to implement your suggestion.

IIS_IUSRS does have Read permission for the directory that the application
is in. I have tried providing full control to that group and it still doesn't
work.

Post by Knapek Miroslav
If web is running under admin account the problem must be in permissions.
Try another step: make Read permission for IUSR... enable.
HTH
Miroslav

Post by Seigfried
First, thank you for the reply.
Second, I did change the security for both NetworkService and LocalSystem to
the folder. I made them both "Read" and then "Full Control". It didn't work.
And I know that IIS actually does work because the new account I established
CAN browse the .aspx page. But no builtin accounts can.

Post by Knapek Miroslav
Hello,
the most of this problems are wrong folder permissions setting.
Check permission on folder where your aspx file is placed for NETWORK
SERVICE user.
Read permission must be enabled.
Miroslav

Post by Seigfried
I'm learning ASP.NET (Yes, this IS an IIS question. I'm not in the wrong
group.) so I have installed IIS 7 on my Vista Business System. I'm not a
member of a domain. Everything is installed on a single computer.
The first lesson in the book I'm reading tells you to bring up their initial
.aspx web page to verify that everything has been installed and is working.
I've been bogged down on that for quite a while.
It IS working now, but in a mode that I do not understand. Here's what I
have done.
1 - The initial .aspx web page would not work with default installed
settings. In IIS Manager, using the Basic Setting Action, the Test Settings
button returned an Authorization error: "Cannot verify access to path".
"The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$
has
Read
access to the physical path. Then test these settings again."
2 - Both the NetworkService Application Pool identity and the LocalSystem
Application Pool identity gave the same result above. I gave the IIS_IUSRS
group full control over the physical directory where the website files are
and it didn't make any difference. (I've changed it back now.)
3 - Finally, since I couldn't think of anything else to try and I
wanted
to
find out if IIS 7 actually did work, I created a new Administrator account,
with a password, and used the Connect As button to Set this Specific User.
THIS WORKED! The .aspx page came up. The Test Settings button returned
success.
How do I configure IIS 7 so I can use a built-in account to run this app?

[Ken Schaefer]

Hi,

a) Is the actual .aspx page located locally on the IIS server (i.e. not on a
network share)?

b) What actually happens when you try to access that ASPX page? You said
originally "The initial .aspx web page would not work with default installed
settings", but could you be a bit more specific? E.g. are you getting an
error message?

Cheers
Ken

--
www.adopenstatic.com/blog

Post by Seigfried
I don't understand how to implement your suggestion.
IIS_IUSRS does have Read permission for the directory that the application
is in. I have tried providing full control to that group and it still doesn't
work.

Post by Knapek Miroslav
If web is running under admin account the problem must be in permissions.
Try another step: make Read permission for IUSR... enable.
HTH
Miroslav

Post by Seigfried
First, thank you for the reply.
Second, I did change the security for both NetworkService and
LocalSystem
to
the folder. I made them both "Read" and then "Full Control". It didn't work.
And I know that IIS actually does work because the new account I established
CAN browse the .aspx page. But no builtin accounts can.

Post by Knapek Miroslav
Hello,
the most of this problems are wrong folder permissions setting.
Check permission on folder where your aspx file is placed for NETWORK
SERVICE user.
Read permission must be enabled.
Miroslav

Post by Seigfried
I'm learning ASP.NET (Yes, this IS an IIS question. I'm not in the wrong
group.) so I have installed IIS 7 on my Vista Business System. I'm
not
a
member of a domain. Everything is installed on a single computer.
The first lesson in the book I'm reading tells you to bring up their initial
.aspx web page to verify that everything has been installed and is working.
I've been bogged down on that for quite a while.
It IS working now, but in a mode that I do not understand. Here's
what
I
have done.
1 - The initial .aspx web page would not work with default installed
settings. In IIS Manager, using the Basic Setting Action, the Test Settings
button returned an Authorization error: "Cannot verify access to path".
"The server is configured to use pass-through authentication with a built-in
account to access the specified physical path. However, IIS Manager cannot
verify whether the built-in account has access. Make sure that the
application pool identity has Read access to the physical path. If this
server is joined to a domain, and the application pool identity is
NetworkService or LocalSystem, verify that <domain>\<computer_name>$
has
Read
access to the physical path. Then test these settings again."
2 - Both the NetworkService Application Pool identity and the LocalSystem
Application Pool identity gave the same result above. I gave the IIS_IUSRS
group full control over the physical directory where the website
files
are
and it didn't make any difference. (I've changed it back now.)
3 - Finally, since I couldn't think of anything else to try and I
wanted
to
find out if IIS 7 actually did work, I created a new Administrator account,
with a password, and used the Connect As button to Set this Specific User.
THIS WORKED! The .aspx page came up. The Test Settings button returned
success.
How do I configure IIS 7 so I can use a built-in account to run this app?