IIS application gets Access denied to UNC folder that has proper permissions

Question

0.00/5 (No votes)

See more:

A customer of ours has given us 2 virtual machines and a shared folder on a different machine that I don't have access to. I want to access the shared folder from an IIS 7 application that runs on the virtual machines.

When I log onto the virtual machines I use the user "XXX\aaa".

The web application runs in its own App Pool and that App Pool has been given the Identity "XXX\aaa". I can modify the permissions on the shared folder and have added "XXX\aaa" as having full control of the shared folder.

The IIS application gets "Access to path \\sharded\folder is denied".

From either of the virtual machines, I can added folders and files to the shared drive. I can also do this with an console application.

However, if I create a shared folder on one of the virtual machines and point the other virtual machine to use the first, I am successful - even though "XXX\aaa" has not been added to the security. FYI: however, Administrators is in the security, but "Administrators" is not available on the shared folder. I presume "XXX\aaa" is part of the "Administrators" group and that is why it succeeds. I can't add "Administrators" to the shared folder, but I would assume that adding "XXX\aaa" would suffice.

I want to be able to go back to the customer and explain what needs to be done, but I don't have a clue!

Posted 19-Jun-13 11:06am

Ger2001

Add a Solution

4 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Christian Graus · Answer 1 · 2013-06-19T12:12:00

Solution 1

Your IIS user does not have permission. The error means what it says.

Posted 19-Jun-13 12:12pm

Christian Graus

mgoad99 · Answer 2 · 2013-06-19T12:31:00

IIS can be a bit confusing when it comes to figuring out what accounts your application is running under and setting up the correct security for shared folders. Once you know what account the app is running under (and that is the account trying to access your shared folder) it is pretty simple.

Where I work, we have a few web apps that need to access files on a shared folder also. Using IIS 7, by default i believe the apps will run under <machine name="">\iis_iusrs account. Our shared folders are setup to give that account permission to read/write. (you will need to set the share permissions and also the NTFS permissions. So, when looking at the folders properties, there is a sharing tab. Set the permissions there. There is also a security tab. Also set the permissions there.

Good luck!

Ger2001 · Answer 3 · 2013-06-20T07:40:00

Solution 3

Well, I didn't really solve it. Our customer gave me a new user to use and once I set the App Pool identification to the new user, I was able to access the shared folder. So ultimately, it had something to do with the security on the remote system. But its all too confusing to me!

Posted 20-Jun-13 7:40am

Ger2001

Walter Ricardo Catter Martinez · Answer 4 · 2014-06-24T20:05:00

Solution 4

Set same users in both computers with IIS access, then in IIS, create a virtual directory and introduce logon details (same details) and all should be ok.

Posted 24-Jun-14 20:05pm

Walter Ricardo Catter Martinez