Ist der Server ein Domain-Controller? Wenn ja, vielleicht koennen die
folgenden Bemerkungen von Scott Guthrie (von aspngstart) helfen:
-------------------------------------------------------------------
ASP.NET and Windows Domain Controllers
By default ASP.NET runs the ASP.NET worker process using a
non-adminitrative windows account called "ASPNET". This restricts what
an ASP.NET application can do on a machine -- and requires
administrators to explicitly grant security permissions.
However, on Windows Domain Controller machines (this includes the
Windows Small Business Server product) the ASPNET account cannot be used
-- since non-administrative local accounts cannot be created and used
(the security policy of a Windows Domain Controller machine prevents
this).
If you attempt to use the default ASPNET account when running an ASP.NET
page on a Windows Domain Controller, the worker process will fail to
start -- most likely with an error message similar to the one below:
"aspnet_wp.exe could not be launched because the username and/or
password supplied in the processModel section of the config file are
invalid"
To fix this, it is necessary to configure ASP.NET to instead use the
LocalSystem account after setup. This is done by modifying the
<processModel> tag within the Machine.Config configuration file
installed in the below location:
c:\Windows\Microsoft.Net\Framework\V1.0.3705\Config\Machine.Config
By default you will find that the <processModel> configuration tag has a
"userName" attribute set to the value: "MACHINE". Changing this value
to "SYSTEM" will cause ASP.NET to instead use the LocalSystem account
when executing. This account *does* have permission to run on Windows
Domain Controllers.
After making the change to the Machine.Config XML file, save it, and
then restart IIS (iisreset). ASP.NET will then be using the LocalSystem
account to run its worker process, and ASP.NET will function fine on
domain controllers.
Thanks,
Scott
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Christoph
Wille
Sent: Thursday, January 17, 2002 1:53 AM
To: aspDEdotnet
Subject: [aspdedotnet] Re: Authentication
>wie sehen die ACLs auf die ASPX-Seite aus?
�hmm, wie ich schrieb: lokaler Administrator full control, sonst
niemand,
keine Inheritance.
>Da ASP.NET jetzt bunter ASPNET Account l�uft sollte man das mal
�berpr�fen ...
ich habe dem ASPNET Account auch schon "act as part of the operating
system" gegeben, sowie das processModel auf SYSTEM umgestellt - nichts
hat
geholfen.
Chris
| [aspdedotnet] als [email protected] subscribed
| http://www.dotnetgerman.com/archiv/aspdedotnet/ = Listenarchiv
| Sie k�nnen sich unter folgender URL an- und abmelden:
| http://www.dotnetgerman.com/listen/aspDEdotnet.asp
