StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POApplicationPoolIdentity permissions on Temporary Asp.Net files
primarykey
Id
2996556
data
AcceptedAnswerId
3042385
AnswerCount
2
ClosedDate
CommentCount
2
CommunityOwnedDate
CreationDate
2010-06-08T10:36:15.853
FavoriteCount
2
LastActivityDate
2011-05-23T11:11:44.977
LastEditDate
2010-06-08T10:39:37.287
LastEditorUserId
286595
OwnerUserId
250230
ParentId
0
PostTypeId
1
Score
0
ViewCount
8079
LastEditorDisplayName
text
Body
at work I am struggling a bit with the following situation: We have a web application that runs on a WIndows Server 2008 64 bits machine. The app's ApplicationPool is running under the ApplicationPoolIdentity and configured for .net 2 and Classic pipeline mode. This works fine up to the moment that XmlSerialization requires creation of Serializer assemblies where MEF is being used to create a collection of knowntypes. To remedy this I was hoping that granting the ApplicationPoolIdentity rights to the ASP.Net Temporary Files directory would be enough, but alas... What I did was the run the following command from a cmd prompt: <pre><code>icacls "c:\windows\microsoft.net\framework64\v2.0.50727\Temporary ASP.NET Files" /grant "IIS AppPool\MyAppPool":(M) </code></pre> Obviously this did not work, otherwise you would not be reading this :) Strange thing is that whenever I grant the Users or even more specific, the Authenticated Users Group those permissions, it works. What's weird as well (in my eyes) is that before I started granting access the ApplicationPoolIdentity was already a member of IIS_IUSRS which does have Modify rights for the temporary asp files directory. And now I'm left wondering why this situation requires Modify rights for the Authenticated Users group. I thought it could be because the apppool account was missing additional rights (googling for this returned some results, so I tried those), but granting the ApplicationPoolIdentity modification rights to the Windows\Temp directory and/or the application directory itself did not fix it. For now we have a workaround, but I hate that I don't know what is exactly going on here, so I was hoping any of you guys could shed some light on this. Thanx in advance!
Tags
<asp.net><iis><iis-7.5>
Title
ApplicationPoolIdentity permissions on Temporary Asp.Net files
singulars
PostAcceptedAnswerId
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. USzed_0xff
UserOwnerUserId
1. USAnton
plurals
PostLinksPostIdRelatedPostId
1. This table or related slice is empty.
PostLinksRelatedPostIdPostId
1. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
2. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
CommentsPostId
1. COWhat user is the app pool running as? NetworkService? or something else?
 singulars
 PostPostId
 POApplicationPoolIdentity permissions on Temporary Asp.Net files
 UserUserId
 USMatthew Abbott
2. COThe app pool is running under the ApplicationPoolIdentity, that's why access rights were set using icacls in a cmd prompt.
 singulars
 PostPostId
 POApplicationPoolIdentity permissions on Temporary Asp.Net files
 UserUserId
 USAnton

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.