IIS5 and permissions

**Ray at** · Jul 19 '05, 10:05 AM

Re: IIS5 and permissions

Make sure that your IUSR account has NTFS permissions to the \data
directory. The IUSR account need to be able to modify files, create files,
and delete files in that directory.

Ray at work

"Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
news:%23TgYUIi2 DHA.1924@TK2MSF TNGP10.phx.gbl. ..[color=blue]
> Hi, I have installed IIS5 on my machine so that I can do offline asp web
> development. (using WIN XP PRO). My machine is called "developmen t"
>
> I have published an on-line working web to
> http://development/websites/defaultwebsite/de-stress and copied on-line
> working data to c:\inetpub\wwwr oot\de-stress\data\sch ooldata.mdb
>
> The database schooldata.mdb is in access97, and in its on-line existence
> accepts both read and write access OK.
>
> However, offline, I can only get it to run in read-only mode, any attempt[/color]
to[color=blue]
> write to it results in "object read only" error.
>
> The DSN is set up without System Data Base. I have set read/write[/color]
permission[color=blue]
> in IIS on all the path nodes websites, defaultwebsite, de-stress, data and
> schooldata.mdb and have set anonymous access/user name
> IUSR_DEVELOPMEN T/allow IIS to control password wherever appropriate, and
> still I cannot write into the db from the site.
>
> I have only access 2000 installed on this machine, which will not let me
> write into an access97 db, but surely the write takes place server-side? I
> have converted the db to access2000 to see if that solved the problem, but
> makes it worse as the asp pages can neither read Nor write, saying I have[/color]
no[color=blue]
> permission, even if the DSN is set up with system data base which allows[/color]
me[color=blue]
> to change it. The db itself has user/group admin permissions on database[/color]
and[color=blue]
> all tables. What else can I do to get at my own data??? Is there not an
> offline no-permissions mode to allow offline development without all this
> hassle?
>
> Sorry to be long-winded. Desperate for some help. Thanks Hugh
>
>[/color]

**Ray at** · Jul 19 '05, 10:05 AM

Re: IIS5 and permissions

p.s. You should fix your clock. You're jumping to the ~end~ of the line.
Apply the opposite logic that you read here, and you'll see you're being
super-courteous. :] www.aspfaq.com/5005

Ray at work

"Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
news:%23TgYUIi2 DHA.1924@TK2MSF TNGP10.phx.gbl. ..[color=blue]
> Hi, I have installed IIS5 on my machine so that I can do offline asp web
> developme[/color]

**Hugh Welford** · Jul 19 '05, 10:06 AM

Re: IIS5 and permissions

HI Ray, as far as I can see my clock is set correctly in the GMT time
zone - I am in UK.

Regards Hugh

"Ray at <%=sLocation% >" <myfirstname at lane34 dot com> wrote in message
news:OfY0BNi2DH A.2856@TK2MSFTN GP09.phx.gbl...[color=blue]
> p.s. You should fix your clock. You're jumping to the ~end~ of the line.
> Apply the opposite logic that you read here, and you'll see you're being
> super-courteous. :] www.aspfaq.com/5005
>
> Ray at work
>
> "Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
> news:%23TgYUIi2 DHA.1924@TK2MSF TNGP10.phx.gbl. ..[color=green]
> > Hi, I have installed IIS5 on my machine so that I can do offline asp web
> > developme[/color]
>
>[/color]

**Hugh Welford** · Jul 19 '05, 10:06 AM

Re: IIS5 and permissions

Thanks for your help Ray. Since I am a newbie, and not familiar with IIS,
could you tell me how to give IUSR account the NTFS permissions to the \data
directory? In the IIS console tree, right clicking the data directory and
selection properties shows that I have already checked read/write in the
local path box on the Directory Tab, and on the Directory Security tab have
checked anonymous access in the anonymous access and authentication methods
box.

If I have to do any more, I would be grateful for your further help, and
some advice as to where I could get a manaul on IIS management. Thanks Hugh

"Ray at <%=sLocation% >" <myfirstname at lane34 dot com> wrote in message
news:eLgikKi2DH A.3416@tk2msftn gp13.phx.gbl...[color=blue]
> Make sure that your IUSR account has NTFS permissions to the \data
> directory. The IUSR account need to be able to modify files, create[/color]
files,[color=blue]
> and delete files in that directory.
>
> Ray at work
>
> "Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
> news:%23TgYUIi2 DHA.1924@TK2MSF TNGP10.phx.gbl. ..[color=green]
> > Hi, I have installed IIS5 on my machine so that I can do offline asp web
> > development. (using WIN XP PRO). My machine is called "developmen t"
> >
> > I have published an on-line working web to
> > http://development/websites/defaultwebsite/de-stress and copied on-line
> > working data to c:\inetpub\wwwr oot\de-stress\data\sch ooldata.mdb
> >
> > The database schooldata.mdb is in access97, and in its on-line existence
> > accepts both read and write access OK.
> >
> > However, offline, I can only get it to run in read-only mode, any[/color][/color]
attempt[color=blue]
> to[color=green]
> > write to it results in "object read only" error.
> >
> > The DSN is set up without System Data Base. I have set read/write[/color]
> permission[color=green]
> > in IIS on all the path nodes websites, defaultwebsite, de-stress, data[/color][/color]
and[color=blue][color=green]
> > schooldata.mdb and have set anonymous access/user name
> > IUSR_DEVELOPMEN T/allow IIS to control password wherever appropriate, and
> > still I cannot write into the db from the site.
> >
> > I have only access 2000 installed on this machine, which will not let me
> > write into an access97 db, but surely the write takes place server-side?[/color][/color]
I[color=blue][color=green]
> > have converted the db to access2000 to see if that solved the problem,[/color][/color]
but[color=blue][color=green]
> > makes it worse as the asp pages can neither read Nor write, saying I[/color][/color]
have[color=blue]
> no[color=green]
> > permission, even if the DSN is set up with system data base which allows[/color]
> me[color=green]
> > to change it. The db itself has user/group admin permissions on database[/color]
> and[color=green]
> > all tables. What else can I do to get at my own data??? Is there not an
> > offline no-permissions mode to allow offline development without all[/color][/color]
this[color=blue][color=green]
> > hassle?
> >
> > Sorry to be long-winded. Desperate for some help. Thanks Hugh
> >
> >[/color]
>
>[/color]

**Ray at** · Jul 19 '05, 10:06 AM

Re: IIS5 and permissions

Looks good now!

Ray at work

"Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
news:OJIRoCr2DH A.1764@TK2MSFTN GP10.phx.gbl...[color=blue]
> HI Ray, as far as I can see my clock is set correctly in the GMT time
> zone - I am in UK.
>
> Regards Hugh
>
>
>
> "Ray at <%=sLocation% >" <myfirstname at lane34 dot com> wrote in message
> news:OfY0BNi2DH A.2856@TK2MSFTN GP09.phx.gbl...[color=green]
> > p.s. You should fix your clock. You're jumping to the ~end~ of the[/color][/color]
line.[color=blue][color=green]
> > Apply the opposite logic that you read here, and you'll see you're being
> > super-courteous. :] www.aspfaq.com/5005
> >
> > Ray at work
> >
> > "Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
> > news:%23TgYUIi2 DHA.1924@TK2MSF TNGP10.phx.gbl. ..[color=darkred]
> > > Hi, I have installed IIS5 on my machine so that I can do offline asp[/color][/color][/color]
web[color=blue][color=green][color=darkred]
> > > developme[/color]
> >
> >[/color]
>
>[/color]

**Ray at** · Jul 19 '05, 10:06 AM

Re: IIS5 and permissions

NTFS file permissions are set at the file system level within Windows
Explorer, for example, not IIS. So, open a Windows Explorer, right click
the folder, click properties, go to the security tab, click Add..., type
YOURCOMPUTERNAM E\IUSR_YOURCOMP UTERNAME, press Enter, select read, write,
modify (or just full control if you aren't the ultra-paranoid type) and
click OK.

If you do not see a security tab, either you don't have your drive formatted
in NTFS and you're problem is something else entirely, or your XP OS is
setup in that way that hides everything that is useful. If you don't see
it, then do this:

Start---run--CMD--Enter
format c:
[read the response]
Press Ctrl+C to cancel out of this operation.

If it said you have an NTFS drive (as opposed to FAT[32]), then enter this:

cacls c:\inetpub\wwwr oot\de-stress\data /E /G IUSR_YourComput erName:F

Ray at work

"Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
news:uhfbnCr2DH A.1764@TK2MSFTN GP10.phx.gbl...[color=blue]
> Thanks for your help Ray. Since I am a newbie, and not familiar with IIS,
> could you tell me how to give IUSR account the NTFS permissions to the[/color]
\data[color=blue]
> directory? In the IIS console tree, right clicking the data directory and
> selection properties shows that I have already checked read/write in the
> local path box on the Directory Tab, and on the Directory Security tab[/color]
have[color=blue]
> checked anonymous access in the anonymous access and authentication[/color]
methods[color=blue]
> box.
>
> If I have to do any more, I would be grateful for your further help, and
> some advice as to where I could get a manaul on IIS management. Thanks[/color]
Hugh[color=blue]
>
>[/color]

**hugh Welford** · Jul 19 '05, 10:10 AM

Re: IIS5 and permissions

Thanks Ray for your advice. I do not see the Security tab, but do have NTFS,
so followed your advice - but still no joy.

Even after the recommended changes, when I go to the data directory in Win
Explorer, and go to Properties the read-only attibute is set. It un-checks,
but doesnt take - it is still checked if I go there again. Just drives you
mad.

Also, In Explorer, if I go to the db properties of the db in the data
directory, it tells me the file will open with ACCESS for windows (does the
IIS server side use the same ACCESS as client side in offline situation like
this?). Anyway, the db which is working on-line in in ACCESS 97 format, so I
upgraded the offline version to ACCESS 2000, and it will now neither read
nor write...tells me I dont have permission, even tho the DSN is no system
database. If I try to look at permissions on this 2000 db, ut tells me I
have no permission - "records cannot be read: no read permission on
Msysaccounts"

It all drives you mad - never had these problems with win 98 and PWS - all I
want to do is write to my own data.

I quite understand if you dont wish to continue with this, but if you dont
mind, any further advice would be gratefull accepted. What is the best
resource to learn about WIN XP/IIS management?

Regards and Thanks Hugh

"Ray at <%=sLocation% >" <myfirstname at lane34 dot com> wrote in message
news:edvRbJr2DH A.2528@TK2MSFTN GP09.phx.gbl...[color=blue]
> NTFS file permissions are set at the file system level within Windows
> Explorer, for example, not IIS. So, open a Windows Explorer, right click
> the folder, click properties, go to the security tab, click Add..., type
> YOURCOMPUTERNAM E\IUSR_YOURCOMP UTERNAME, press Enter, select read, write,
> modify (or just full control if you aren't the ultra-paranoid type) and
> click OK.
>
> If you do not see a security tab, either you don't have your drive[/color]
formatted[color=blue]
> in NTFS and you're problem is something else entirely, or your XP OS is
> setup in that way that hides everything that is useful. If you don't see
> it, then do this:
>
> Start---run--CMD--Enter
> format c:
> [read the response]
> Press Ctrl+C to cancel out of this operation.
>
> If it said you have an NTFS drive (as opposed to FAT[32]), then enter[/color]
this:[color=blue]
>
> cacls c:\inetpub\wwwr oot\de-stress\data /E /G IUSR_YourComput erName:F
>
> Ray at work
>
> "Hugh Welford" <hugh.welford@b tinternet.com> wrote in message
> news:uhfbnCr2DH A.1764@TK2MSFTN GP10.phx.gbl...[color=green]
> > Thanks for your help Ray. Since I am a newbie, and not familiar with[/color][/color]
IIS,[color=blue][color=green]
> > could you tell me how to give IUSR account the NTFS permissions to the[/color]
> \data[color=green]
> > directory? In the IIS console tree, right clicking the data directory[/color][/color]
and[color=blue][color=green]
> > selection properties shows that I have already checked read/write in the
> > local path box on the Directory Tab, and on the Directory Security tab[/color]
> have[color=green]
> > checked anonymous access in the anonymous access and authentication[/color]
> methods[color=green]
> > box.
> >
> > If I have to do any more, I would be grateful for your further help, and
> > some advice as to where I could get a manaul on IIS management. Thanks[/color]
> Hugh[color=green]
> >
> >[/color]
>
>[/color]

**Ray at** · Jul 19 '05, 10:10 AM

Re: IIS5 and permissions

"hugh Welford" <hugh.welford@b tinternet.com> wrote in message
news:%23RoDSU52 DHA.2580@TK2MSF TNGP09.phx.gbl. ..[color=blue]
> Thanks Ray for your advice. I do not see the Security tab, but do have[/color]
NTFS,[color=blue]
> so followed your advice - but still no joy.[/color]

I think it may have something to do with the "use simple file sharing"
option in Windows Explorer's tools--options, but I cannot say for sure. All
the XP machines that I use are in domains, and when you join a domain when
installing XP, it sets things up a bit more "professionaly. " I suggest
asking in an XP forum something along the lines of:

I have XP Pro and my drive is formated in NTFS. But when I pull up the
properties of a folder, the security tab is not displayed. How do I get it
to display?

[color=blue]
>
> Even after the recommended changes, when I go to the data directory in Win
> Explorer, and go to Properties the read-only attibute is set. It[/color]
un-checks,[color=blue]
> but doesnt take - it is still checked if I go there again. Just drives you
> mad.[/color]

That's different.

[color=blue]
>
> Also, In Explorer, if I go to the db properties of the db in the data
> directory, it tells me the file will open with ACCESS for windows (does[/color]
the[color=blue]
> IIS server side use the same ACCESS as client side in offline situation[/color]
like[color=blue]
> this?).[/color]

That just indicates what application is registered for the .mdb extension on
your machine. On the IIS server, ADO is what is used to access the
database.

[color=blue]
> Anyway, the db which is working on-line in in ACCESS 97 format, so I
> upgraded the offline version to ACCESS 2000, and it will now neither read
> nor write...tells me I dont have permission, even tho the DSN is no system
> database. If I try to look at permissions on this 2000 db, ut tells me I
> have no permission - "records cannot be read: no read permission on
> Msysaccounts"[/color]

I don't know what that's about... Are you using one of those "workgroup"
databases or whatever? But also, drop the DSN and use an OLEDB connection
string to connect to your Access DB. See the OLEDB strings for Access at
www.connectionstrings.com.

[color=blue]
> It all drives you mad - never had these problems with win 98 and PWS - all[/color]
I[color=blue]
> want to do is write to my own data.[/color]

The same thing that is causing these problems in XP is the same thing that
makes XP (and NT lines) a far superior operating system. File permissions
are crucial.

[color=blue]
> I quite understand if you dont wish to continue with this, but if you dont
> mind, any further advice would be gratefull accepted. What is the best
> resource to learn about WIN XP/IIS management?[/color]

The Internet. :P
www.iisfaq.com is a good site. Hopefully you've already discovered
www.aspfaq.com. There are some XP newsgroups, but it's like the NYSE in
there. There are sixteen million people all shouting at the same time
hoping to be heard. It's insane. I'm more partial to
Windows_XP_Prof essional@yahoog roups.com.

Ray at home

**hugh Welford** · Jul 19 '05, 10:10 AM

Re: IIS5 and permissions

Thanks a million, Ray...you are a star.

Hugh

"Ray at <%=sLocation% >" <myFirstNameATl ane34dotKOMM> wrote in message
news:#SKH3s72DH A.1760@TK2MSFTN GP10.phx.gbl...[color=blue]
>
> "hugh Welford" <hugh.welford@b tinternet.com> wrote in message
> news:%23RoDSU52 DHA.2580@TK2MSF TNGP09.phx.gbl. ..[color=green]
> > Thanks Ray for your advice. I do not see the Security tab, but do have[/color]
> NTFS,[color=green]
> > so followed your advice - but still no joy.[/color]
>
> I think it may have something to do with the "use simple file sharing"
> option in Windows Explorer's tools--options, but I cannot say for sure.[/color]
All[color=blue]
> the XP machines that I use are in domains, and when you join a domain when
> installing XP, it sets things up a bit more "professionaly. " I suggest
> asking in an XP forum something along the lines of:
>
> I have XP Pro and my drive is formated in NTFS. But when I pull up the
> properties of a folder, the security tab is not displayed. How do I get[/color]
it[color=blue]
> to display?
>
>[color=green]
> >
> > Even after the recommended changes, when I go to the data directory in[/color][/color]
Win[color=blue][color=green]
> > Explorer, and go to Properties the read-only attibute is set. It[/color]
> un-checks,[color=green]
> > but doesnt take - it is still checked if I go there again. Just drives[/color][/color]
you[color=blue][color=green]
> > mad.[/color]
>
> That's different.
>
>[color=green]
> >
> > Also, In Explorer, if I go to the db properties of the db in the data
> > directory, it tells me the file will open with ACCESS for windows (does[/color]
> the[color=green]
> > IIS server side use the same ACCESS as client side in offline situation[/color]
> like[color=green]
> > this?).[/color]
>
> That just indicates what application is registered for the .mdb extension[/color]
on[color=blue]
> your machine. On the IIS server, ADO is what is used to access the
> database.
>
>[color=green]
> > Anyway, the db which is working on-line in in ACCESS 97 format, so I
> > upgraded the offline version to ACCESS 2000, and it will now neither[/color][/color]
read[color=blue][color=green]
> > nor write...tells me I dont have permission, even tho the DSN is no[/color][/color]
system[color=blue][color=green]
> > database. If I try to look at permissions on this 2000 db, ut tells me I
> > have no permission - "records cannot be read: no read permission on
> > Msysaccounts"[/color]
>
>
> I don't know what that's about... Are you using one of those "workgroup"
> databases or whatever? But also, drop the DSN and use an OLEDB connection
> string to connect to your Access DB. See the OLEDB strings for Access at
> www.connectionstrings.com.
>
>
>[color=green]
> > It all drives you mad - never had these problems with win 98 and PWS -[/color][/color]
all[color=blue]
> I[color=green]
> > want to do is write to my own data.[/color]
>
> The same thing that is causing these problems in XP is the same thing that
> makes XP (and NT lines) a far superior operating system. File permissions
> are crucial.
>
>[color=green]
> > I quite understand if you dont wish to continue with this, but if you[/color][/color]
dont[color=blue][color=green]
> > mind, any further advice would be gratefull accepted. What is the best
> > resource to learn about WIN XP/IIS management?[/color]
>
> The Internet. :P
> www.iisfaq.com is a good site. Hopefully you've already discovered
> www.aspfaq.com. There are some XP newsgroups, but it's like the NYSE in
> there. There are sixteen million people all shouting at the same time
> hoping to be heard. It's insane. I'm more partial to
> Windows_XP_Prof essional@yahoog roups.com.
>
> Ray at home
>
>[/color]

IIS5 and permissions

IIS5 and permissions

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment