Can't run a batch file from ASP

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • cryogeneric
    New Member
    • Jan 2008
    • 15
    #1

    Can't run a batch file from ASP

    Hello everyone, :)

    I can't seem to get around some annoying permission issues when I attempt to run a quick test where I call a batch file from my ASP script.

    I'm running this on my XP Pro machine with IIS 5.1

    Here is my test script (batchtest.asp) :
    Code:
    <html>
<body>

<h1>
<%	
    Dim wshell
	
    Set wshell = Server.CreateObject("WScript.Shell") 
    Call wshell.Run("C:\Inetpub\wwwroot\test2.bat",0,true)
    'wshell.Run "C:\Inetpub\wwwroot\test2.bat"
    
    Set wshell = nothing 
%>
</h1>

</body>
</html>
    The batch file simply does "ECHO Hello"

    No matter what I do, I get a "permission denied" issue.

    1) What is the correct syntax to run a system command? (You can see in my test script I have two scenarios)

    2) Where does the batch file need to be? Can I place it in the same folder as my ASP script?

    3) What permissions need to be set? Do I need to set permissions in IIS, the wwwroot folder, the batch file itself, etc...??

    Thank you millions!!!

    -Cryo
    Tags: None
    • jehrich
      New Member
      • Jan 2008
      • 24
      #2
      Hi Cryo,

      I'm not sure about the syntax, but I think your commented version is correct.

      Classic ASP files run under the context of the "Anonymouse Internet User" account defined for the virtual web server that it's executed from. Technically you can place your batch file just about anywhere, but you must make sure that this account (typically IUSR_machinename) has at least read access to the file (and any other files that the file uses if it gets more complicated than 'ECHO Hello'). You can do this by right-clicking the batch file (or it's parent folder if you want to allow running all batch files in this folder) and adding the account on the security tab.

      Hope that helps.

      JE

        Comment

        • cryogeneric
          New Member
          • Jan 2008
          • 15
          #3
          Originally posted by jehrich
          Hi Cryo,

          I'm not sure about the syntax, but I think your commented version is correct.

          Classic ASP files run under the context of the "Anonymouse Internet User" account defined for the virtual web server that it's executed from. Technically you can place your batch file just about anywhere, but you must make sure that this account (typically IUSR_machinename) has at least read access to the file (and any other files that the file uses if it gets more complicated than 'ECHO Hello'). You can do this by right-clicking the batch file (or it's parent folder if you want to allow running all batch files in this folder) and adding the account on the security tab.

          Hope that helps.

          JE
          Thank you for the response! I think my test wouldn't work regardless (since I need to response.write the ouput... I'm thinking unix), but I set all of the permissions for the batch file and it still didn't work. I found this snippit from another site and now it seems that the batch file runs.

          Code:
          Permissions is the most likely cause. If you open a command prompt on your
2003 machine and enter "cacls %comspec%" you'll get something like:

C:\WINDOWS\system32\cmd.exe NT AUTHORITY\INTERACTIVE:R
NT AUTHORITY\SERVICE:R
BUILTIN\Administrators:F
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
RAY2003\TelnetClients:R

Notice that the IUSR account does not have rights, nor does the guest group.

Enter this: cacls %comspec% /E /G IUSR_your_server_name:R
          I hope I didn't just make my system vulnerable???

            Comment

            • jehrich
              New Member
              • Jan 2008
              • 24
              #4
              Yes, of course... I completely forgot about the command interpreter itself.

              I'm not a security expert, but I do know that there have been many efforts to prevent anonymous internet users from starting cmd.exe - after all, you don't want just anyone to be able to run "del c:\*.*" on your machine. I suspect you have just bypassed many of these security measures.

              Perhaps it would be a good idea to consider taking the functionlity out of your batch file and putting it directly into your ASP code. This way you could avoid giving more access than necessary to the IUSR account.

              Either way, one of my favorite utilities for troubleshooting permission related problems is procmon from Sysinternals.

              Good luck!

              JE

                Comment

                • Alexander22
                  New Member
                  • Jul 2010
                  • 1
                  #5
                  Re: How to run batch file through IIS ..but no error

                  I encountered a similar problem...

                  My BAT file was executed well on the system, but not from ASP. I didn't got any error, but my BAT file was just.. not executed !

                  Permissions on folder, cmd.exe and cscript.exe were OK.



                  I found that using only "cmd / c " is not sufficient.. it needs to be used TWO times !

                  as is :
                  Dim oShell
                  Set oShell = Server.CreateOb ject("Wscript.S hell")
                  Call oShell.Run("cmd /c cmd /c """ & BAT_Filename & """")
                  Set oShell = Nothing
                  Regards ! Hope it can HELP

                    Comment

                    Previous template Next
                    Working...