Web Server Promoted To Domain Controller

We have a web server that is hosting several ASP.Net-based websites
(intranet).
The server was promoted as a backup domain controller. After doing
this, the websites are not working anymore.
>From IIS, I configured the access level to Domain\IUSR_mymachine. When
I try to browse, I get this error:

Access to the path
"C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Tempora ry ASP.NET
Files\app\df0d1c90\2eb457a7" is denied.

I think my problem is that the local ASPNet account is not in my server
anymore since it became a domain controller.

Can I configure my server to a user a domain level ASPNet account?

Any help is appreciated.

Thanks,
Cesarre:
>I think my problem is that the local ASPNet account is not
> in my server anymore since it became a domain controller.

That's exactly it.

re:
>Can I configure my server to a user a domain level ASPNet account?

Yes, you can.

See :
http://msdn.microsoft.com/library/d...paght000009.asp

Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
ASPNETFAQ.COM : http://www.aspnetfaq.com/
Foros de ASP.NET en Espaol : http://asp.net.do/foros/
======================================
<cksanjose@.gmail.com> wrote in message
news:1131489510.948606.98320@.g14g2000cwa.googlegro ups.com...
> We have a web server that is hosting several ASP.Net-based websites
> (intranet).
> The server was promoted as a backup domain controller. After doing
> this, the websites are not working anymore.
>>From IIS, I configured the access level to Domain\IUSR_mymachine. When
> I try to browse, I get this error:
> Access to the path
> "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Tempora ry ASP.NET
> Files\app\df0d1c90\2eb457a7" is denied.
> I think my problem is that the local ASPNet account is not in my server
> anymore since it became a domain controller.
> Can I configure my server to a user a domain level ASPNet account?
> Any help is appreciated.
> Thanks,
> Cesar

Web Server Promoted To Domain Controller

We have a web server that is hosting several ASP.Net-based websites
(intranet).
The server was promoted as a backup domain controller. After doing
this, the websites are not working anymore.
>From IIS, I configured the access level to Domain\IUSR_mymachine. When
I try to browse, I get this error:
Access to the path
"C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\app\df0d1c90\2eb457a7" is denied.
I think my problem is that the local ASPNet account is not in my server
anymore since it became a domain controller.
Can I configure my server to a user a domain level ASPNet account?
Any help is appreciated.
Thanks,
Cesarre:
>I think my problem is that the local ASPNet account is not
> in my server anymore since it became a domain controller.
That's exactly it.
re:
>Can I configure my server to a user a domain level ASPNet account?
Yes, you can.
See :
http://msdn.microsoft.com/library/d... />
000009.asp
Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
ASPNETFAQ.COM : http://www.aspnetfaq.com/
Foros de ASP.NET en Espaol : http://asp.net.do/foros/
======================================
<cksanjose@.gmail.com> wrote in message
news:1131489510.948606.98320@.g14g2000cwa.googlegroups.com...
> We have a web server that is hosting several ASP.Net-based websites
> (intranet).
> The server was promoted as a backup domain controller. After doing
> this, the websites are not working anymore.
> I try to browse, I get this error:
> Access to the path
> "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> Files\app\df0d1c90\2eb457a7" is denied.
> I think my problem is that the local ASPNet account is not in my server
> anymore since it became a domain controller.
> Can I configure my server to a user a domain level ASPNet account?
> Any help is appreciated.
> Thanks,
> Cesar
>

Web Service security, need to be configurable

Here is my web service:

<WebMethod(), PrincipalPermissionAttribute(SecurityAction.Demand, Authenticated:=True, Role:="MyDomain\Domain Users")> _
Public Function GetData(ByVal strTableName As String, ByVal blnCustom As Boolean) As DataSet
'**********************************************************************************
'Gets the data for the given table name
'**********************************************************************************
GetData = DBGetData(strTableName, blnCustom)
End Function

The problem I am having is that I want to be able to make the Role attribute (Role:="MyDomain\Domain Users") changable when installed on the client machine. I wanted to do this with the web.config file if possible. Of course, it says it needs a constant in order to work. The problem with that is I want dynamic. We have been fighting back and forth, and the web service is winning.:( How do I change this instead of having to recompile?Well, for a work around, I am checking the HTTPContext to see if the user is in the role.

web services

If the database is on another domain, and is not a database server such as
SQL Server, MySql, or Oracle, or does not have a public IP address, or is
otherwise not available directly, that would be a good reason to do this. If
the database is on the same domain, or is a database server with a public IP
address, this would be a bad idea.
HTH,
Kevin Spencer
Microsoft MVP
.Net Developer
We got a sick zebra a hat,
you ultimate tuna.
"JIM.H." <JIMH@dotnet.itags.org.discussions.microsoft.com> wrote in message
news:84DAE478-E741-4399-B29E-F3B9A7C6D1DB@dotnet.itags.org.microsoft.com...
> Hello,
> I have an asp.net application developed by someone else and it seems it
> interacts with database through web services. What is the benefit of this?
> Any idea?
> Thanks,
>Hi Kevin,
Thanks for the reply. The asp.net application is on a web server for
internet users. Web server is a DMZ machine as far as I heard which is a
different domain then the SQL Server database in the domain. In this case,
can I go without web services? Can I make connection from DMZ to SQL Server
without web services, or I have to use web services?
Thanks for your help.
"Kevin Spencer" wrote:

> If the database is on another domain, and is not a database server such as
> SQL Server, MySql, or Oracle, or does not have a public IP address, or is
> otherwise not available directly, that would be a good reason to do this.
If
> the database is on the same domain, or is a database server with a public
IP
> address, this would be a bad idea.
> --
> HTH,
> Kevin Spencer
> Microsoft MVP
> ..Net Developer
> We got a sick zebra a hat,
> you ultimate tuna.
>
> "JIM.H." <JIMH@.discussions.microsoft.com> wrote in message
> news:84DAE478-E741-4399-B29E-F3B9A7C6D1DB@.microsoft.com...
>
>
Hi Jim,
SQL Server databases are usually connected to using TCP/IP, and have an IP
address (of the machine on which they reside) and port number (usually
1433). So, if the SQL Server can be accessed from the other domain (usually
this means that it has a public IP address), there is no need for a web
service. Otherwise, there is a need for some kind of service to connect to
it.
HTH,
Kevin Spencer
Microsoft MVP
.Net Developer
We got a sick zebra a hat,
you ultimate tuna.
"JIM.H." <JIMH@.discussions.microsoft.com> wrote in message
news:8E6BCE49-2D16-4739-8B10-387E8C920E6D@.microsoft.com...
> Hi Kevin,
> Thanks for the reply. The asp.net application is on a web server for
> internet users. Web server is a DMZ machine as far as I heard which is a
> different domain then the SQL Server database in the domain. In this case,
> can I go without web services? Can I make connection from DMZ to SQL
> Server
> without web services, or I have to use web services?
> Thanks for your help.
>
> "Kevin Spencer" wrote:
>