App_Data / Services

[Edu-IT]

I've given App_Date folder write permission for IIS_WPG and NETWORK SERVICE but when I run the installer it's saying that it doesn't have write access. Where am I going wrong?

Under 'Advanced' I see that IIS_WPG Read, Write, Execute and NETWORK SERVICE has Read, Write, Execute all under entries for not inherited. Then further down there is inherited entries with ust Read & Execute for IIS_WPG and NETWORK SERVICE.

Think I've missed a step?

[nickbro]

IIS6 or IIS7? If IIS7 see Can't Find IIS AppPool\HAP, the Answer

[Edu-IT]

No it's IIS6.

[nickbro]

Odd then, the write access is saying that HAP can't write the app_data folder, which it needs too. The last resort is adding the everyone permission. Try looking in the event viewer's security logs for the audit failure log.

[Edu-IT]

Odd then, the write access is saying that HAP can't write the app_data folder, which it needs too. The last resort is adding the everyone permission. Try looking in the event viewer's security logs for the audit failure log.

Is the inherited thing right? It's not one permission taking priority over another?

[nickbro]

The instructions say to override the inherited permissions on the app_data folder only, elevating them to have write permissions. If you are having issues with permissions, the everyone will solve it. Don't worry, no one can access the App_Data folder without access to the server locally.

[Edu-IT]

The instructions say to override the inherited permissions on the app_data folder only, elevating them to have write permissions. If you are having issues with permissions, the everyone will solve it. Don't worry, no one can access the App_Data folder without access to the server locally.

What instructions are the latest? I was using documentation.pdf from hap.codeplex.com and they make no reference to inherited permissions.

[nickbro]

For IIS6:
1. In IIS, check that the AppPool is set to run under the network service user - See: Microsoft Corporation
2. Check that the Anonymous User is set to also use the network service user - See: IIS6.0 UI vs. IIS7.x UI Series: Anonymous Authentication : Nitasha&#39s blog : The Official Microsoft IIS Site
2. Remove inherited permissions from the HAP Folder
3. Add: Domain Admins/Administrators - Full; Network Service - Read & Execute; System - Full Control
4. On the App_Data folder override the inherited permissions from the HAP Folder (note override, not remove)
5. Add: Network Service - Read, Write & Execute

[Edu-IT]

Okay, so I've made changes, but now no images load?

If I go to image directly /images/haplogo.png for example then I get access denied error.

[nickbro]

Can you check the anonymous user setting (IIS6.0 UI vs. IIS7.x UI Series: Anonymous Authentication : Nitasha&#39s blog : The Official Microsoft IIS Site)

[Edu-IT]

It's set as IUSR_ etc. I didn't quite understand that part to be honest.

[nickbro]

Change it from that to the Network Service

[Edu-IT]

I tried entering Network Service but it can't be found?

[nickbro]

Browse for it, should be something like NT Authority\Network Service

[Edu-IT]

Yes I've tried NT AUTHORITY\Network Service but no luck there either. There's nothng there that resembles that.

Just to confirm, I am going into IIS > HAP > Directory Security > Anonymous Access > Edit then Browse?