File permission problem

**Ray at** · Jul 19 '05, 07:59 AM

Re: File permission problem

Assuming you're using anonymous access on your site (the default), you'll
have to give IUSR_<computern ame> NTFS write permissions to the directory to
which you're trying to save the file, D:\UploadedFile s.

Ray at work

"Richard Muller" <RichardLMuller DELETE@comcast. net> wrote in message
news:uUtlF5vkDH A.2000@TK2MSFTN GP12.phx.gbl...
[color=blue]
>
> Microsoft VBScript runtime (0x800A0046)
> Permission denied
> /upload.asp, line 137
>
> The offending line is:
> Set oFile = oFS.CreateTextF ile(sPath & FileName, True)
>
> Saving to folder D:\UploadedFile s\[/color]

**Richard Muller** · Jul 19 '05, 07:59 AM

Re: File permission problem

Hi Ray,

Many thanks for your response. I was sure you were putting me on the right
track. I just wasn't sure whether I could follow the track :-) Here's what
I did, but still wound up with Permission Denied. Any other suggestions?

Regards,
Richard Muller
[color=blue]
> Assuming you're using anonymous access on your site (the default)[/color]

I verified anonymous access as follows:
In Microsoft Management Console for IIS,

right-clicked the one-and-only entry, the server name, and clicked
Properties

clicked the Directory Security tab

clicked the Edit button in Anonymous access and authentication control group

accepted default: Anonymous access checkbox checked

accepted default: Integrated Windows authentication checkbox checked

[color=blue]
> IUSR_<computern ame> NTFS write permissions to the directory to
> which you're trying to save the file, D:\UploadedFile s.[/color]

I tried to provide write permissions to that folder as follows:

I right-clicked that folder name in Windows Explorer on the server,

clicked Properties which opened the UploadFiles Properties dialog,

clicked Web Sharing tab,

clicked the Share this folder radio button,

accepted the defaults of: Read, Write and Scripts.

Still got Permission denied.

Again opened the UploadedFiles Properties dialog,

clicked Sharing tab,

clicked the Share this folder radio button,

accepted the default sharename UploadedFiles

clicked the Permissions button which opened the Permissions for
UploadedFiles dialog,

clicked Remove on the Everyone class of users,

clicked the Add button (closing the Permissions for UploadedFiles dialog),

double-clicked my workstation's name and OK in the Select Users, Computers
or Groups dialog,

clicked (Allow) Full Control on workstation's name.

Still got Permission denied.

Stopped and restarted IIS

In Microsoft Management Console for IIS.

right-clicked the one-and-only entry, the server name

clicked Stop IIS

After it stops, right-click the server name

clicked Restart IIS

Still got Permission denied.

**Ray at** · Jul 19 '05, 07:59 AM

Re: File permission problem

Undo all the sharing stuff that you did unless you really want to share this
directory on your network.

When you pull up the properties dialog for that folder, you ~should~ have
these tabs:

Windows XP:
General
Sharing
Security
Web Sharing
[Customize]

Windows 2000:
General
Web Sharing
Sharing
Security

Windows NT 4:
I forget.

You want to set the permissions on the SECURITY tab. Add the IUSR to the
list of users with permissions and give that user permissions to write and
modify contents. If you do not have a security tab, your drive is not NTFS.
If that is the case, there's some other issue. AV software maybe?

Ray at work

"Richard Muller" <RichardLMuller DELETE@comcast. net> wrote in message
news:OBcqbrzkDH A.2080@TK2MSFTN GP10.phx.gbl...
[color=blue]
>
> Again opened the UploadedFiles Properties dialog,
>
> clicked Sharing tab,
>
> clicked the Share this folder radio button,
>
> accepted the default sharename UploadedFiles
>
> clicked the Permissions button which opened the Permissions for
> UploadedFiles dialog,
>
> clicked Remove on the Everyone class of users,
>
> clicked the Add button (closing the Permissions for UploadedFiles dialog),
>
> double-clicked my workstation's name and OK in the Select Users, Computers
> or Groups dialog,
>
> clicked (Allow) Full Control on workstation's name.
>[/color]

**Richard Muller** · Jul 19 '05, 08:00 AM

Re: File permission problem

Hi Ray,

On my Windows2000AS/SP4 server,

in D:\UploadedFile s | Properties menu item | Security tab | Add button ==>
Select Users, Computers, or Groups dialog

"MachineNam e for Workstation 1" said to be in folder "MyDomain"/Computers
with a PC icon

"MachineNam e for Workstation 2" said to be in folder "MyDomain"/Computers
with a PC icon

"MachineNam e for Server" said to be in folder "MyDomain"/DomainControlle rs
with a PC icon

IUSER_"MachineN ame for Server"

No other IUSER_xxx

I added both workstations and gave the all permissions except Full Control

Got same Permission denied for server file D:\UploadedFile s

BTW, I undid my the shares I had created

Grasping at straws, I made a new website: UploadedMateria l

I opened MMC on Workstation 1

I connected to the server

I right-clicked Default Web Server and clicked New | Virtual Directory

I gave it the alias UploadedMateria l and pointed it to D:\UploadedFile s

I adjusted the .asp to look for the “directory” UploadedMateria l,

which terminated the update process prematurely because of ASP statement

If Not oFS.FolderExist s(sPath) Then Exit Sub,

where sPath had the value UploadedMateria l

Suppressing that check led the error Path not found instead of the previous
Permission denied.

Thinking that perhaps my internet connection to IIS might have gotten
wrecked with all the changes I made, I gave IE the address http://MyServer,
which dutifully returned a page that include the line This is
D:\inetpub\wwwr oot\default.asp , which is indeed in my default.asp folder in
the indicated directory, which is the directory assigned to my Default Web
Site.

Can you think of any other possible error of omission or commission I might
have made? As you chave no doubt observed, I don’t have much network
administration experience, despite decades of application-developer
experience.

Regards,

Richard Muller

**Ray at** · Jul 19 '05, 08:00 AM

Re: File permission problem

"Richard Muller" <RichardLMuller DELETE@comcast. net> wrote in message
news:evt%23%23h 2kDHA.2244@TK2M SFTNGP12.phx.gb l...[color=blue]
> Hi Ray,
>
> On my Windows2000AS/SP4 server,
>
> in D:\UploadedFile s | Properties menu item | Security tab | Add button ==>
> Select Users, Computers, or Groups dialog
>
> "MachineNam e for Workstation 1" said to be in folder "MyDomain"/Computers
> with a PC icon
>
> "MachineNam e for Workstation 2" said to be in folder "MyDomain"/Computers
> with a PC icon
>
> "MachineNam e for Server" said to be in folder "MyDomain"/DomainControlle rs
> with a PC icon
>
> IUSER_"MachineN ame for Server"
>
> No other IUSER_xxx
>[/color]

Is this a DC? What account is IIS running under (or that directory with
your asp file anyway)?

At least we know the drive is NTFS. Look, just give everyone full control
for a moment or two to determine if it is even a permissions issue. Do it
the simple way by entering this at the command prompt:

cacls D:\UploadedFile s /e /g everyone:f

If that works, remove everyone and then give the same permissions to the
IUSR account that your site is using.

Ray at home

**Richard Muller** · Jul 19 '05, 08:00 AM

Re: File permission problem

Hi Ray,
[color=blue]
> Is this a DC?[/color]

Yes, the Win2000 Advanced Server is a Domain Controller. It's running, as
I recall from the setup I implemented last year, a Windows 2000 network
with no sub-2000 machines allowed on it, e.g. Win98 or WinME.
[color=blue]
> What account is IIS running under (or that directory with your asp file[/color]
anyway)?

I don't know how to determine that. I'll try to figure it out tomorrow
sometime.
[color=blue]
> At least we know the drive is NTFS.[/color]

Absolutely: On the server, on a Win2000 workstation (#1) and on a WinXP/Pro
workstation (#2)
[color=blue]
> Look, just give everyone full control > for a moment or two to determine[/color]
if it is even a permissions issue. Do it the simple way by entering this
at the command prompt: cacls D:\UploadedFile s /e /g everyone:f

Will do tomorrow sometime.
[color=blue]
> If that works, remove everyone and then give the same permissions to the[/color]
IUSR account that your site is using.

OK. I assume you mean the one-and-only IUSR_[ServerName] account that I
mentioned.

Thank you very much for hanging in there with me as I wrestled with this
"alligator. " I've definitely learned a lot, for which I'm grateful.

Regards,
Richard

**Ray at** · Jul 19 '05, 08:00 AM

Re: File permission problem

"Richard Muller" <RichardLMuller DELETE@comcast. net> wrote in message
news:Obr1Xh5kDH A.1284@TK2MSFTN GP09.phx.gbl...[color=blue]
> Hi Ray,
>[color=green]
> > Is this a DC?[/color]
>
> Yes[/color]

EEGS! ;]
[color=blue]
> the Win2000 Advanced Server is a Domain Controller. It's running, as
> I recall from the setup I implemented last year, a Windows 2000 network
> with no sub-2000 machines[/color]

Must be nice... I'm still stuck with some 95 machines and plenty of NT
machines.

[color=blue][color=green]
> > What account is IIS running under (or that directory with your asp file[/color]
> anyway)?
>
> I don't know how to determine that. I'll try to figure it out tomorrow
> sometime.[/color]

Right click My Computer
Click Manage
Expand Services and Applications
Expand IIS
Expand your Web site
Right click on your directory with this asp file.
Click Properties
Click on the Directory Security Tab
Click the Edit button in "Anonymous access and authentication control
Click the Edit button in that dialog in the Anonymous access area (the
checkbox should be checked. If not, ignore the rest of this post and go
back and set permissions for domain users on that target directory)
Take note of the value in the Username textbox. It is probably
IUSR_nameOfDC. This would be a domain account.
Cancel or Esc out of everything.

To set the permissions for this target directory, enter this at the command
prompt.
cacls \\nameOfDC\d$\U ploadedFiles /e /g
netbiosStyleDom ainName\IUSR_na meOfDC:f

[color=blue]
> Thank you very much for hanging in there with me as I wrestled with this
> "alligator. " I've definitely learned a lot, for which I'm grateful.[/color]

No problem. I'll check back tomorrow.

Ray at home

**Richard Muller** · Jul 19 '05, 08:02 AM

Re: File permission problem

Hi Ray,

Without further ado, let me say SUCCESS!
[color=blue]
> EEGS! ;][/color]

What's this? I asked Google: Environmental & Engineering Geophysical
Society
didn't seem quite right. Neither did Electroencephal ograph. :-)

But I did find :] on http://members.aol.com/bearpage/smileys.htm
[color=blue]
> Must be nice... I'm still stuck with some 95 machines and plenty of NT
> machines.[/color]

I'd speculate that you're a network administator for a small company; if it
were a large company, it'd be more up-to-date. At least that's my
experience in decades of consulting in software development.
[color=blue][color=green][color=darkred]
> > > What account is IIS running under (or that directory with your asp[/color][/color][/color]
file[color=blue][color=green]
> > anyway)?
> >
> > I don't know how to determine that.[/color][/color]

Thank's for the blow-by-blow description. I got the domain account
painlessly because of it.
[color=blue]
> To set the permissions for this target directory, enter this at the[/color]
command[color=blue]
> prompt.
> cacls \\nameOfDC\d$\U ploadedFiles /e /g
> netbiosStyleDom ainName\IUSR_na meOfDC:f[/color]

I puzzled over the code for a while because I didn't realize that part of it
was pseudo-code explaining the other pseudo-code. Happily, the cacls
command with no args presents a help list like a good netizen, so after a
few missteps I reached nirvana.

I long ago took a stab at going through NT Security, but it was dull and I
didn't have a pressing need for it, so I dropped it. This experience has
peeked my interest in it, so I just cracked open my copy of Inside Windows
NT, 1998 edition. Maybe I'll even get an up-to-date copy.

Anyway, thanks for all the help.

Stay in touch,
Richard Muller

**Ray at** · Jul 19 '05, 08:02 AM

Re: File permission problem

"Richard Muller" <RichardLMuller DELETE@comcast. net> wrote in message
news:uM31HLDlDH A.1408@TK2MSFTN GP11.phx.gbl...[color=blue]
> Hi Ray,
>
> Without further ado, let me say SUCCESS![/color]

Cool!
[color=blue]
>[color=green]
> > EEGS! ;][/color]
>
> What's this? I asked Google: Environmental & Engineering Geophysical
> Society
> didn't seem quite right. Neither did Electroencephal ograph. :-)
>
> But I did find :] on http://members.aol.com/bearpage/smileys.htm[/color]

ha! No, "eegs" is another way of saying "Oh my God" or something. A quote
from a character on TV, Tony Dimera. Okay, I confess. I watch Days of Our
Lives.

[color=blue]
>
> I'd speculate that you're a network administator for a small company; if[/color]
it[color=blue]
> were a large company, it'd be more up-to-date. At least that's my
> experience in decades of consulting in software development.[/color]

HA! I'm a programmer at a medium sized company (I guess). $2.7 billion
bank, which is medium sized.

[color=blue]
> I long ago took a stab at going through NT Security, but it was dull and[/color]
I[color=blue]
> didn't have a pressing need for it, so I dropped it. This experience has
> peeked my interest in it, so I just cracked open my copy of Inside[/color]
Windows[color=blue]
> NT, 1998 edition. Maybe I'll even get an up-to-date copy.[/color]

Outstanding. Yeah, unfortunately, I don't think any IT career can be
performed in a vacuum. If you program, you have to understand networking,
permissions, domains, and other such things. And if you're a network admin,
you have to at least have a clue about how programming works. I hate when
the network admins say, "Can you write a script to install this
never-heard-of-before software package onto all the computers in the company
from the intranet?

Uh, no. Buy SMS. :]

Ray at home
[color=blue]
>
> Anyway, thanks for all the help.
>
> Stay in touch,
> Richard Muller
>
>
>[/color]

**Richard Muller** · Jul 19 '05, 08:05 AM

Re: File permission problem

> Okay, I confess. I watch Days of Our Lives.
No problem. I'm a West Wing junkie. IMHO, it's got the sharpest dialog
and most realistic scences of any series I've ever seen. The current
season's offering has lost some of the show's luster because a major cast
member and the show's creator are gone.
[color=blue]
> Yeah, unfortunately, I don't think any IT career can be
> performed in a vacuum. If you program, you have to understand networking,
> permissions, domains, and other such things.[/color]

I agree in general. However, I've almost always worked in large
institutions which had network administrators that prevented app developers
from making any changes to network configuration. That's why I've never
paid much attention to it. But I decided to put up a website on my own
server and eventually open it to the public. Hence the present need for
hands-on networking.
[color=blue]
> Buy SMS. :][/color]

I'm not ready for mobile communications right now. I want to keep my on
website development with "traditiona l" access, along with good design to
make it attractive, good content to make it interesting and good security
to make it reliable. That's enough to worry about for one lone programmer
(with the technical support of my son, whose a high-level developer in a
national website, except he's mainly Linux and Unix rather than Windows, and
big packages like BEA rather than low-level development.)

I'm on a roll now, working to hook ASP into SQL Server 2000 right now. I'll
post another plea for help when that turns out to be problematical, but I
don't really anticipate any difficuly.

C'ya,
Richard

**Richard Muller** · Jul 19 '05, 08:14 AM

Re: File permission problem

Hey Ray,

I tried to access a SQL Server 7 database using ADO within ASP. I had
trouble getting it working, so I decided to install SQL Server 2000
Enterprise Edition over version 7, which failed (probably because of all the
security updates, etc. done in the past two years to the Win2000 Adv.
Server SP4 installation.

If you're still in the mood to help this humble programmer and up to speed
on the intricacies on SQL Server installations, please take a look at my
post :
"Recovery from failed SQL2000 update to SQL7 - How?" on the NG
"microsoft.publ ic.sqlserver.se tup".

Regards,
Richard

"Ray at <%=sLocation% >" <myfirstname at lane34 dot com> wrote in message
news:OafI0YykDH A.744@tk2msftng p13.phx.gbl...[color=blue]
> Assuming you're using anonymous access on your site (the default), you'll
> have to give IUSR_<computern ame> NTFS write permissions to the directory[/color]
to[color=blue]
> which you're trying to save the file, D:\UploadedFile s.
>
> Ray at work
>
> "Richard Muller" <RichardLMuller DELETE@comcast. net> wrote in message
> news:uUtlF5vkDH A.2000@TK2MSFTN GP12.phx.gbl...
>[color=green]
> >
> > Microsoft VBScript runtime (0x800A0046)
> > Permission denied
> > /upload.asp, line 137
> >
> > The offending line is:
> > Set oFile = oFS.CreateTextF ile(sPath & FileName, True)
> >
> > Saving to folder D:\UploadedFile s\[/color]
>
>[/color]

File permission problem

File permission problem

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment