App_Data / Services

[Edu-IT]

I've given App_Date folder write permission for IIS_WPG and NETWORK SERVICE but when I run the installer it's saying that it doesn't have write access. Where am I going wrong?

 

Under 'Advanced' I see that IIS_WPG Read, Write, Execute and NETWORK SERVICE has Read, Write, Execute all under entries for not inherited. Then further down there is inherited entries with ust Read & Execute for IIS_WPG and NETWORK SERVICE.

 

Think I've missed a step?

[nickbro]

IIS6 or IIS7? If IIS7 see http://www.edugeek.net/forums/home-access-plus/84055-cant-find-iis-apppool-hap-answer.html

[Edu-IT]

No it's IIS6.

[nickbro]

Odd then, the write access is saying that HAP can't write the app_data folder, which it needs too. The last resort is adding the everyone permission. Try looking in the event viewer's security logs for the audit failure log.

[Edu-IT]

Odd then, the write access is saying that HAP can't write the app_data folder, which it needs too. The last resort is adding the everyone permission. Try looking in the event viewer's security logs for the audit failure log.

Is the inherited thing right? It's not one permission taking priority over another?

[nickbro]

The instructions say to override the inherited permissions on the app_data folder only, elevating them to have write permissions. If you are having issues with permissions, the everyone will solve it. Don't worry, no one can access the App_Data folder without access to the server locally.

[Edu-IT]

The instructions say to override the inherited permissions on the app_data folder only, elevating them to have write permissions. If you are having issues with permissions, the everyone will solve it. Don't worry, no one can access the App_Data folder without access to the server locally.

What instructions are the latest? I was using documentation.pdf from hap.codeplex.com and they make no reference to inherited permissions.

[nickbro]

For IIS6:

1. In IIS, check that the AppPool is set to run under the network service user - See: Microsoft Corporation

2. Check that the Anonymous User is set to also use the network service user - See: IIS6.0 UI vs. IIS7.x UI Series: Anonymous Authentication : Nitasha&#39s blog : The Official Microsoft IIS Site

2. Remove inherited permissions from the HAP Folder

3. Add: Domain Admins/Administrators - Full; Network Service - Read & Execute; System - Full Control

4. On the App_Data folder override the inherited permissions from the HAP Folder (note override, not remove)

5. Add: Network Service - Read, Write & Execute

[Edu-IT]

Okay, so I've made changes, but now no images load?

 

If I go to image directly /images/haplogo.png for example then I get access denied error.

[nickbro]

Can you check the anonymous user setting (IIS6.0 UI vs. IIS7.x UI Series: Anonymous Authentication : Nitasha&#39s blog : The Official Microsoft IIS Site)

[Edu-IT]

It's set as IUSR_ etc. I didn't quite understand that part to be honest.

[nickbro]

Change it from that to the Network Service

[Edu-IT]

I tried entering Network Service but it can't be found?

[nickbro]

Browse for it, should be something like NT Authority\Network Service

[Edu-IT]

Yes I've tried NT AUTHORITY\Network Service but no luck there either. There's nothng there that resembles that.

 

Just to confirm, I am going into IIS > HAP > Directory Security > Anonymous Access > Edit then Browse?

[nickbro]

Ok IIS6 works differently. In AD create a new user called HAP. Give this user the same permissions as the network service in c:\inetpub\wwwroot\hap.

 

1. Set the AppPool to run as this user

2. Set the Anonymous User to run as this user

[Edu-IT]

Ok IIS6 works differently. In AD create a new user called HAP. Give this user the same permissions as the network service in c:\inetpub\wwwroot\hap.

So are you saying for that folder add the HAP user then give it Read & Execute?

[Edu-IT]

When doing that I just get Error: Access is Denied.

[Edu-IT]

Right, I fixed that. Seems the password wasn't correct for either App Pool or Anonymous User.

 

I've still got write error though on setup. I even tried adding 'Everyone' with Write permission.

Edited January 16, 2012 by Edu-IT

[nickbro]

Inset this into the 2nd line of setup.aspx page: after the <%@ line(s)

 

 

Then load setup.aspx, and view the source of the page, you should see , copy this code and paste it here

[Edu-IT]

[nickbro]

ok that's correct, odd that it isn't working. Did you change the Application Pool identity to that new HAP user you created?

[Edu-IT]

I did, yes.

 

The HAP user has 'Write' non-inherited and Read and Execute inherited.

 

If I give HAP full control I still get a cross on write permission.

Edited January 16, 2012 by Edu-IT

[Edu-IT]

Any ideas Nick?

[nickbro]

Apart from setting the everyone permission on that folder, none. HAP+ Works best on IIS7