Web service security issues after recovery

[Dmitry Duginov]

After hard drive died on my machine, I had to phisically replace it and
restore full system from backup. I was lucky enough and nothing was lost.
But after the recovery I noticed checkdisk was doing the follwing:

Replacing invalid security id with default security id for file 4171
Replacing invalid security id with default security id for file 4172
Replacing invalid security id with default security id for file 4173

Now I'm getting security problems with my ASP.NET applications:

HTTP 401.3 - Access denied by ACL on resource
Internet Information Services

Any ideas how to fix it?

 

[Tom Kaminski [MVP]]

After hard drive died on my machine, I had to phisically replace it and
restore full system from backup. I was lucky enough and nothing was lost.
But after the recovery I noticed checkdisk was doing the follwing:

Replacing invalid security id with default security id for file 4171
Replacing invalid security id with default security id for file 4172
Replacing invalid security id with default security id for file 4173

Now I'm getting security problems with my ASP.NET applications:

HTTP 401.3 - Access denied by ACL on resource
Internet Information Services

Any ideas how to fix it?

What are the NTFS permissions on that content?

 

[Dmitry Duginov]

What are the NTFS permissions on that content?

Looking on folder properties, "Security" tab, ASPNET user has full access

 

[Tom Kaminski [MVP]]

Looking on folder properties, "Security" tab, ASPNET user has full access

That's it? If so that's not nearly enough.
http://support.microsoft.com/kb/812614/

 

[Dmitry Duginov]

access

That's it? If so that's not nearly enough.
http://support.microsoft.com/kb/812614/

That looks like the document I was looking for. Thanks, I'll give it a try.

 

[Steven Cheng[MSFT]]

Hello Dmitry,

In addition to Tom's suggestion on checking the default permission set for
IIS. Here is some articles describing the permission required for ASP.NET
application's worker process idenitity. Not sure whether you're developing
upon ASP.NET 1.1 or 2.0, so I involve both of them here:

#How To: Create a Custom Account to Run ASP.NET 1.1
http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetht01.asp?frame=t
rue

#How To: Create a Service Account for an ASP.NET 2.0 Application
http://msdn.microsoft.com/library/en-us/dnpag2/html/paght000009.asp?frame=tr
ue

Hope this also helps.

Regards,

Steven Cheng
Microsoft Online Community Support


==================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

==================================================


This posting is provided "AS IS" with no warranties, and confers no rights.



Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

 

[Steven Cheng[MSFT]]

Hi Dmitry,

How are you doing on this issue, does the further reference I provided also
helps a little? If there is anything else we can help, please feel free to
post here.

Regards,

Steven Cheng
Microsoft Online Community Support


==================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

==================================================


This posting is provided "AS IS" with no warranties, and confers no rights.



Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)