Access to path is denied on remote server

Question

0.00/5 (No votes)

See more:

I have an MVC application that uses Directory.getfiles() to scrape a network share for a file list and displays them to the used. This has worked fine on my development machine, but when I have deployed this to the web server I get the following:

XML

Access to the path {path}; is denied.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.UnauthorizedAccessException: Access to the path [path]; is denied.

ASP.NET is not authorized to access the requested resource. Consider granting access rights to the resource to the ASP.NET request identity. ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5 or Network Service on IIS 6 and IIS 7, and the configured application pool identity on IIS 7.5) that is used if the application is not impersonating. If the application is impersonating via <identity impersonate="true"/>, the identity will be the anonymous user (typically IUSR_MACHINENAME) or the authenticated request user.

To grant ASP.NET access to a file, right-click the file in File Explorer, choose "Properties" and select the Security tab. Click "Add" to add the appropriate user or group. Highlight the ASP.NET account, and check the boxes for the desired access.

I assume it's because my desktop workstation has my permissions, and the web server does not. How the servers are setup is we have a 2012 R2 Machine running iis8 and a file server hosting the file shares.

How can I give asp permission to the file shares? or alternatively how can I impersonate the current user so they can get at the files if they have access or how can I impersonate a service account with the correct permissions?

thanks!

Posted 4-Aug-15 5:24am

Josiah Bradbury

Add a Solution

Comments

F-ES Sitecore 4-Aug-15 11:31am

Change the anonymous user to an account that has the access you need.

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Dave Kreskowiak · Answer 1 · 2015-08-04T06:00:00

It's not that the workstation has your permissions. YOU have the permissions. Well, your account does. Anything you launch is launched AS YOU and inherits your secruity token.

This includes the IIS Express web server that is launched when you debug your site on your dev machine. Since it's running as you it has access to everything you do, including that share.

When you deploy your app to a real web server, IIS 8, it's running your code under a service account that is pretty restricted. It doesn't have access to network resources for security reasons. Because of this it has no access to the share you're trying to get at.

To fix this, you have to create an account that is specifically setup to execute your website. It should also have whatever access it needs to access the share. Once the account is setup, you go into the IIS Manager and create an Application Pool to run your website and tell it the username and password for the account you created.