IIS7 (Vista) Site Hosted On UNC NTFS Permissions?

[Eric Peterson]

I have a site on my Vista machine that is pointed to a UNC path ie:
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory. Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to find any
local accounts related to IIS7.

Anybody know how to get this working properly?


Thanks,
Eric

[Jeremy Lyons]

Hi,

When you specified the UNC path in IIS, did it prompt for an account
to logon to the other server with? You will need to specify an account
that has access to the remote UNC path.

HTH,
JL!

On Feb 11, 3:50 pm, Eric Peterson

Post by Eric Peterson
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory. Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to find any
local accounts related to IIS7.
Anybody know how to get this working properly?
Thanks,
Eric

[Eric Peterson]

As a matter of fact it didn't. I just checked it and it is set to
'Application User' (Pass Through Auth).

I changed it to myself and I suspect it has worked as it is no longer
complaining about reading web.config, but now has a new error saying it
cannot run in debug because Integrated Windows Authentication is Not Enabled.
If it were IIS6, I'd know where to find that!.

-Eric

Post by Jeremy Lyons
Hi,
When you specified the UNC path in IIS, did it prompt for an account
to logon to the other server with? You will need to specify an account
that has access to the remote UNC path.
HTH,
JL!
On Feb 11, 3:50 pm, Eric Peterson

Post by Eric Peterson
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory. Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to find any
local accounts related to IIS7.
Anybody know how to get this working properly?
Thanks,
Eric

[Steve Schofield]

Make sure you install and enable Windows Authentication. It is under the
IIS 'Authentication' section. It is labeled Windows Authentication. click
on the particular website, it should show up in the right pane.
--
Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP

http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support

Post by Eric Peterson
As a matter of fact it didn't. I just checked it and it is set to
'Application User' (Pass Through Auth).
I changed it to myself and I suspect it has worked as it is no longer
complaining about reading web.config, but now has a new error saying it
cannot run in debug because Integrated Windows Authentication is Not Enabled.
If it were IIS6, I'd know where to find that!.
-Eric

Post by Jeremy Lyons
Hi,
When you specified the UNC path in IIS, did it prompt for an account
to logon to the other server with? You will need to specify an account
that has access to the remote UNC path.
HTH,
JL!
On Feb 11, 3:50 pm, Eric Peterson

Post by Eric Peterson
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory.
Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to find any
local accounts related to IIS7.
Anybody know how to get this working properly?
Thanks,
Eric

[Eric Peterson]

Windows Authentication is not listed in the section you are referencing and I
don't see any option available to add it either. The only thing that seems
to show up in any menu is 'Help'.

-Eric

Post by Steve Schofield
Make sure you install and enable Windows Authentication. It is under the
IIS 'Authentication' section. It is labeled Windows Authentication. click
on the particular website, it should show up in the right pane.
--
Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP
http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support

Post by Eric Peterson
As a matter of fact it didn't. I just checked it and it is set to
'Application User' (Pass Through Auth).
I changed it to myself and I suspect it has worked as it is no longer
complaining about reading web.config, but now has a new error saying it
cannot run in debug because Integrated Windows Authentication is Not Enabled.
If it were IIS6, I'd know where to find that!.
-Eric

Post by Jeremy Lyons
Hi,
When you specified the UNC path in IIS, did it prompt for an account
to logon to the other server with? You will need to specify an account
that has access to the remote UNC path.
HTH,
JL!
On Feb 11, 3:50 pm, Eric Peterson

Post by Eric Peterson
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory.
Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to find any
local accounts related to IIS7.
Anybody know how to get this working properly?
Thanks,
Eric

[Steve Schofield]

Do you see it listed in Control Panel >> program and Features >> Turn
Windows Features on or off >> IIS >> World Wide Web Services >> Security?
What version of Vista are you running?
--
Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP

http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support

Post by Eric Peterson
Windows Authentication is not listed in the section you are referencing and I
don't see any option available to add it either. The only thing that seems
to show up in any menu is 'Help'.
-Eric

Post by Steve Schofield
Make sure you install and enable Windows Authentication. It is under the
IIS 'Authentication' section. It is labeled Windows Authentication.
click
on the particular website, it should show up in the right pane.
--
Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP
http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support

Post by Eric Peterson
As a matter of fact it didn't. I just checked it and it is set to
'Application User' (Pass Through Auth).
I changed it to myself and I suspect it has worked as it is no longer
complaining about reading web.config, but now has a new error saying it
cannot run in debug because Integrated Windows Authentication is Not Enabled.
If it were IIS6, I'd know where to find that!.
-Eric

Post by Jeremy Lyons
Hi,
When you specified the UNC path in IIS, did it prompt for an account
to logon to the other server with? You will need to specify an account
that has access to the remote UNC path.
HTH,
JL!
On Feb 11, 3:50 pm, Eric Peterson

Post by Eric Peterson
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory.
Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to
find
any
local accounts related to IIS7.
Anybody know how to get this working properly?
Thanks,
Eric

[Eric Peterson]

ooooohhh, *that* 'Install'. Jeez, I would have never guessed you needed to
go there to get Windows Auth. Yes, it is there and I've installed it.

Now it is saying it cannot start debugging because there is an
authentication error.

If I select 'Start without Debugging', the site does work.

-Eric

Post by Steve Schofield
Do you see it listed in Control Panel >> program and Features >> Turn
Windows Features on or off >> IIS >> World Wide Web Services >> Security?
What version of Vista are you running?
--
Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP
http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support

Post by Eric Peterson
Windows Authentication is not listed in the section you are referencing and I
don't see any option available to add it either. The only thing that seems
to show up in any menu is 'Help'.
-Eric

Post by Steve Schofield
Make sure you install and enable Windows Authentication. It is under the
IIS 'Authentication' section. It is labeled Windows Authentication.
click
on the particular website, it should show up in the right pane.
--
Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP
http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support

Post by Eric Peterson
As a matter of fact it didn't. I just checked it and it is set to
'Application User' (Pass Through Auth).
I changed it to myself and I suspect it has worked as it is no longer
complaining about reading web.config, but now has a new error saying it
cannot run in debug because Integrated Windows Authentication is Not Enabled.
If it were IIS6, I'd know where to find that!.
-Eric

Post by Jeremy Lyons
Hi,
When you specified the UNC path in IIS, did it prompt for an account
to logon to the other server with? You will need to specify an account
that has access to the remote UNC path.
HTH,
JL!
On Feb 11, 3:50 pm, Eric Peterson

Post by Eric Peterson
\\fileserver\share\user\directory. IIS7 complains it cannot read the
web.config. I assume this is due to NTFS permissions on the directory.
Back
in IIS6 you would add the ASPNET or NETWORKSERVICE account of the local
machine to the directory security and it would work. When I try to setup
security under that directory from the machine, I cannot seem to
find
any
local accounts related to IIS7.
Anybody know how to get this working properly?
Thanks,
Eric

[Eric Peterson]

Everything is working. Thanks for you help!

[unknown]

Appreciate your help on the below problem, I can't even get default web site (http://localhost) to work after enabled asp and asp.net in vista.

Server Error in Application "Default Web Site"

--------------------------------------------------------------------------------

HTTP Error 500.0 - Internal Server Error
Description: Calling GetProcAddress on ISAPI filter "C:\Windows\System32\inetsrv\asp.dll" failed

Error Code: 0x8007007f

Notification: Unknown

Module: IIS Web Core

Requested URL: http://localhost:80/

Physical Path: C:\inetpub\wwwroot

Logon User: Not yet determined

Logon Method: Not yet determined

Failed Request Tracing Log Directory: C:\inetpub\logs\FailedReqLogFiles

Handler: StaticFile

Most likely causes:

The ISAPI Filter has dependencies that are not available on the Web server.
IIS received the request; however, an internal error occurred during the processing of the request. The root cause of this error depends on which module handles the request and what was happening in the worker process when this error occurred.
IIS was not able to access the web.config file for the Web site or application. This can occur if the NTFS permissions are set incorrectly.
IIS was not able to process configuration for the Web site or application.
The authenticated user does not have permission to use this DLL.
What you can try:

Try running Reskit tool "depends" on the ISAPI DLL.
Ensure that the NTFS permissions for the web.config file are correct and allow access to the Web server's machine account.
Check the event logs to see if any additional information was logged.
Verify the permissions for the DLL.
Create a tracing rule to track failed requests for this HTTP status code. For more information about creating a tracing rule for failed requests, click here.
More Information... This error means that there was a problem while processing the request. The request was received by the Web server, but during processing a fatal error occurred, causing the 500 error.

Microsoft Knowledge Base Articles:

294807

--------------------------------------------------------------------------------
Server Version Information: Internet Information Services 7.0.

EggHeadCafe.com - .NET Developer Portal of Choice
http://www.eggheadcafe.com