Showing posts with label theweb. Show all posts
Showing posts with label theweb. Show all posts

Saturday, March 31, 2012

web server folder security

My ASP.Net app need write permission for a folder on the
web server. What confuses me is that I can only make it
work if I give it write permission to the server machine's
Users group. It doesn't work if I give the same permission
to the IUSR_<machine name> user. It's been my
understanding all along that it is the IUSR_<machine name>
running the web server process. Now I am lot. Can someone
explain it to me?

Thanks

fengI believe asp.net runs under the ASPNET user by default. Try giving that
user only rights.

"feng" <anonymous@.discussions.microsoft.com> wrote in message
news:2483701c45fa7$e1ecb4a0$a301280a@.phx.gbl...
> My ASP.Net app need write permission for a folder on the
> web server. What confuses me is that I can only make it
> work if I give it write permission to the server machine's
> Users group. It doesn't work if I give the same permission
> to the IUSR_<machine name> user. It's been my
> understanding all along that it is the IUSR_<machine name>
> running the web server process. Now I am lot. Can someone
> explain it to me?
> Thanks
> feng
It really depends on what you are doing. IUSR_MachineName is the anonymous
account. If you are truly running a process on behest of the anonymous user,
give IUSR_MachineName rights. In traditional ASP, IUSR_MachineName was a bit
more of a king.

In ASP .NET, there are some other accounts created to run behind the scenes
processes. For example, you have an ASPNET machine account. This account is
where much of the code runs (as well as the worker process). Giving this
account access is often more important than IUSR_MachineName.

I won't even mention IWAM_MachineName right now, as it could get a bit too
deep.

NOTE: ASPNET is a User, which is why giving access to Users works.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

************************************************
Think Outside the Box!
************************************************
"feng" <anonymous@.discussions.microsoft.com> wrote in message
news:2483701c45fa7$e1ecb4a0$a301280a@.phx.gbl...
> My ASP.Net app need write permission for a folder on the
> web server. What confuses me is that I can only make it
> work if I give it write permission to the server machine's
> Users group. It doesn't work if I give the same permission
> to the IUSR_<machine name> user. It's been my
> understanding all along that it is the IUSR_<machine name>
> running the web server process. Now I am lot. Can someone
> explain it to me?
> Thanks
> feng

web server folder security

My ASP.Net app need write permission for a folder on the
web server. What confuses me is that I can only make it
work if I give it write permission to the server machine's
Users group. It doesn't work if I give the same permission
to the IUSR_<machine name> user. It's been my
understanding all along that it is the IUSR_<machine name>
running the web server process. Now I am lot. Can someone
explain it to me?
Thanks
fengI believe asp.net runs under the ASPNET user by default. Try giving that
user only rights.
"feng" <anonymous@.discussions.microsoft.com> wrote in message
news:2483701c45fa7$e1ecb4a0$a301280a@.phx
.gbl...
> My ASP.Net app need write permission for a folder on the
> web server. What confuses me is that I can only make it
> work if I give it write permission to the server machine's
> Users group. It doesn't work if I give the same permission
> to the IUSR_<machine name> user. It's been my
> understanding all along that it is the IUSR_<machine name>
> running the web server process. Now I am lot. Can someone
> explain it to me?
> Thanks
> feng
It really depends on what you are doing. IUSR_MachineName is the anonymous
account. If you are truly running a process on behest of the anonymous user,
give IUSR_MachineName rights. In traditional ASP, IUSR_MachineName was a bit
more of a king.
In ASP .NET, there are some other accounts created to run behind the scenes
processes. For example, you have an ASPNET machine account. This account is
where much of the code runs (as well as the worker process). Giving this
account access is often more important than IUSR_MachineName.
I won't even mention IWAM_MachineName right now, as it could get a bit too
deep.
NOTE: ASPNET is a User, which is why giving access to Users works.
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA
****************************************
********
Think Outside the Box!
****************************************
********
"feng" <anonymous@.discussions.microsoft.com> wrote in message
news:2483701c45fa7$e1ecb4a0$a301280a@.phx
.gbl...
> My ASP.Net app need write permission for a folder on the
> web server. What confuses me is that I can only make it
> work if I give it write permission to the server machine's
> Users group. It doesn't work if I give the same permission
> to the IUSR_<machine name> user. It's been my
> understanding all along that it is the IUSR_<machine name>
> running the web server process. Now I am lot. Can someone
> explain it to me?
> Thanks
> feng

Web Server NOT grabbing File1.PostedFile

Help Needed Please!!! With a VB.NET web application, I am trying to
save pictures and files to a directory on the web server. However, the
web server is not grabbing the Posted Files. For example:
File1.PostedFile Is Nothing = True. Like it always seems to go, this
page and the File1.PostedFile method works perfectly fine on my
development machine(XP Pro, VS.NEt, .Net 1.1). Is there any causes or
reason why the web server(2000 Server, .Net 1.0) is not getting the
File1.PostedFile.

Any ideas as to why this will work on my development machine and not
off the server. Possibly security issues on server? I am really
stumped because I have used the same methods before on other servers.

Thanks,

Brett

How I narrowed down to the above problem:
http://groups-beta.google.com/group...63b135dae60c1c1Does your form have enctype="multipart/form-data" attribute?

--
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU

<bwalke@.lbrspec.com> wrote in message
news:1113404938.416180.252200@.l41g2000cwc.googlegr oups.com...
> Help Needed Please!!! With a VB.NET web application, I am trying to
> save pictures and files to a directory on the web server. However, the
> web server is not grabbing the Posted Files. For example:
> File1.PostedFile Is Nothing = True. Like it always seems to go, this
> page and the File1.PostedFile method works perfectly fine on my
> development machine(XP Pro, VS.NEt, .Net 1.1). Is there any causes or
> reason why the web server(2000 Server, .Net 1.0) is not getting the
> File1.PostedFile.
> Any ideas as to why this will work on my development machine and not
> off the server. Possibly security issues on server? I am really
> stumped because I have used the same methods before on other servers.
> Thanks,
> Brett
> How I narrowed down to the above problem:
> http://groups-beta.google.com/group...63b135dae60c1c1
No, I do not believe so. Where exactly do you put this?

Thanks for your help.
<form runat="server" enctype="multipart/form-data"...>
<%-- Controls go here --%>
</form
--
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU

<bwalke@.lbrspec.com> wrote in message
news:1113407675.740786.76040@.g14g2000cwa.googlegro ups.com...
> No, I do not believe so. Where exactly do you put this?
> Thanks for your help.
thanks that did the trick!!

Web Server NOT grabbing File1.PostedFile

Help Needed Please!!! With a VB.NET web application, I am trying to
save pictures and files to a directory on the web server. However, the
web server is not grabbing the Posted Files. For example:
File1.PostedFile Is Nothing = True. Like it always seems to go, this
page and the File1.PostedFile method works perfectly fine on my
development machine(XP Pro, VS.NEt, .Net 1.1). Is there any causes or
reason why the web server(2000 Server, .Net 1.0) is not getting the
File1.PostedFile.
Any ideas as to why this will work on my development machine and not
off the server. Possibly security issues on server? I am really
stumped because I have used the same methods before on other servers.
Thanks,
Brett
How I narrowed down to the above problem:
http://groups-beta.google.com/group...63b135dae60c1c1Does your form have enctype="multipart/form-data" attribute?
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU
<bwalke@.lbrspec.com> wrote in message
news:1113404938.416180.252200@.l41g2000cwc.googlegroups.com...
> Help Needed Please!!! With a VB.NET web application, I am trying to
> save pictures and files to a directory on the web server. However, the
> web server is not grabbing the Posted Files. For example:
> File1.PostedFile Is Nothing = True. Like it always seems to go, this
> page and the File1.PostedFile method works perfectly fine on my
> development machine(XP Pro, VS.NEt, .Net 1.1). Is there any causes or
> reason why the web server(2000 Server, .Net 1.0) is not getting the
> File1.PostedFile.
> Any ideas as to why this will work on my development machine and not
> off the server. Possibly security issues on server? I am really
> stumped because I have used the same methods before on other servers.
> Thanks,
> Brett
> How I narrowed down to the above problem:
> http://groups-beta.google.com/group...63b135dae60c1c1
>
No, I do not believe so. Where exactly do you put this?
Thanks for your help.
<form runat="server" enctype="multipart/form-data"...>
<%-- Controls go here --%>
</form>
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU
<bwalke@.lbrspec.com> wrote in message
news:1113407675.740786.76040@.g14g2000cwa.googlegroups.com...
> No, I do not believe so. Where exactly do you put this?
> Thanks for your help.
>
thanks that did the trick!!