Auth Diagnostics

Hi, I don't know if it is the right place to ask this question, anyway,
please let me know if I should post anywhere else
I deployed W2k3 R2 based on an image using rapid deployment
Whenever I tried accesing a .aspx page, I get denied access to directory
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files" in
spit of the fact even everyone has all privilèges


I ran "auth Diagnostics ", I got several warnings as follows :

Server's response: HTTP/1.1 403 Forbidden Path:W3SVC/1/ROOT/aspnet_client
Learn about IIS status codes AuthType:Anonymous
Server's response: HTTP/1.1 403
Forbidden Path:W3SVC/1/ROOT/DOSI.Logistic.CanceledOrderChecker_Proxy
Learn about IIS status codes AuthType:Anonymous
.......
........

I know ASP .net, I found that there was an issue with the only line in
Global.aspx
<%@ Application Codebehind="Global.asax.cs"
Inherits="TestHostInstance.Global" %>

I renamaed teh file on global1 so it won't be seen by IIS, I started
browsing the pages. I switched to the interface " auth Diagnostics", ran the
"Check auth..." test, I got the same results. In fact it was not

So, In reality the issue has nothing to do with any Access privilèges, what
is going wrong or is Auth Diag " is working correctly?

I tried to use some tropubleshooting tools, by starting the following commande
>>>>logman start W3wpTrace -p "IIS: Request Monitor" -ets, <<<<
>>>run in IE the same pages<<<
>>>then stop the session<<<<<

I get no output. I tried to write output to an etl file then trying to
display the contents in datagrid, I have nothing in the file

I woyuld highly appreciate any info regarding those 2 isseus, especially
logman is designed to troubleshoot low level IIS problems

Thanks in advance

wjzhang
Tue Nov 28 03:46:28 CST 2006

Hi Salam,

According to the following article, my suggestion is that you may run
filemon to check what account is exactly denied on special file access.

910449 Troubleshooting common permissions and security-related issues in
ASP.NET
http://support.microsoft.com/default.aspx?scid=kb;EN-US;910449

http://www.sysinternals.com/Utilities/Filemon.html

1) Launch filemon,stop capture and click filter on its toolbar. Remove *
and input w3wp.exe as the included string.

2) Change font if necessary(need restart filemon).

3) Start capture.

4) Browse to the web page to reproduce the access denied error.

5) Stop capture and save as the log.

Generally we should be able to find some access denied errors in the log
which may point out the root cause. Please send the filemon.log to me at:
wjzhang@online.microsoft.com (remove online.) I will help review it.

Have a good day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

wjzhang
Thu Dec 28 08:16:08 CST 2006

Hi Salam,

I've tested the web service from you on 2 of my test machines but neither
of them reproduced the problem you met. Everything works smoothly including
the web services and your test page. So I believe the problem is specific
to your environment? Have you tried to deploy the application to another
box to see what the result is?

Thanks.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.