Network Service Permissions on Temporary ASP.Net Files?

[Rick Strahl [MVP]]

I'm having problems with installation of a Web app on my Win 2003 server.

I copy up the app configure the virtual. But when I access any ASPX pages I
now get:

CS0016: Could not write to output file
'd:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\company_mywebapp\e792bb5e\ed91474e\nupdhhtj.dll' -- 'Access is denied.
'

This appears to have to do with how IIS 6's Impersonation is configured. If
I change the AppPool configuration to using 'Local System' account rather
than 'Network Service' then the app runs fine.

Now, I've checked the permissions on the folder in the above errror message
and I even went as far as giving Everyone full access to the Temporary
ASP.Net Files folder, but the app will simply not run with the default
settings throwing the above error.

What permission requirements are there to make this work? Any ideas?

+++ Rick ---

--

Rick Strahl
West Wind Technologies
http://www.west-wind.com/
http://www.west-wind.com/wwHelp

 

[Ken Cox [Microsoft MVP]]

Hi Rick,

You've probably done this already, but I'm just checking whether you granted
full permissions on the Temp folder to the NETWORK SERVICE user account in .NET
Framework 1.1?

Apparently ASP.NET uses the Temp folder to generate files before they are
copied to the other Temporary folder:

PRB: CS0013 or CS0016 Compilation Errors in ASP.NET Web Applications

http://support.microsoft.com/default.aspx?scid=kb;en-us;825791

Ken

--
Microsoft MVPs have a question for *you*: Are you patched against the Worm?
http://www.microsoft.com/security/security_bulletins/ms03-026.asp



I'm having problems with installation of a Web app on my Win 2003 server.

I copy up the app configure the virtual. But when I access any ASPX pages I
now get:

CS0016: Could not write to output file
'd:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\company_mywebapp\e792bb5e\ed91474e\nupdhhtj.dll' -- 'Access is denied.
'

This appears to have to do with how IIS 6's Impersonation is configured. If
I change the AppPool configuration to using 'Local System' account rather
than 'Network Service' then the app runs fine.

Now, I've checked the permissions on the folder in the above errror message
and I even went as far as giving Everyone full access to the Temporary
ASP.Net Files folder, but the app will simply not run with the default
settings throwing the above error.

What permission requirements are there to make this work? Any ideas?

+++ Rick ---

--

Rick Strahl
West Wind Technologies
http://www.west-wind.com/
http://www.west-wind.com/wwHelp

 

[Rick Strahl [MVP]]

Thanks Ken,

Definitely didn't have this set. Just tried setting it quickly and now I get
'Application unavailable', which is worse yet <g>... switching back to
System runs the app fine.

I'll have to test this locally. I've been doing this over a remote
connection to the server and it's a bit painful this way <g>... app runs for
hte moment, but with a less than optimal security environment.

+++ Rick ---

--

Rick Strahl
West Wind Technologies
http://www.west-wind.com/
http://www.west-wind.com/wwHelp