Click here to get back home

Windows 2003 permissions and Process Monitor outpu

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Windows 2003 permissions and Process Monitor outpu Jim 03-09-2007
Posted by Jim on March 9, 2007, 6:35 am
Please log in for more thread options
I am troubleshooting what may be a permissions issue but I don't
understand what the right lever is to fix it. I set up a virtual
directory in IIS 6 with read/write privileges and anonymous access
using an account I created called IUSR_Dropbox. Using the MS utility
bigpost.exe, I can overwrite existing files but when creating a new
file, it fails with a "404.0 2" error in the IIS log. Using Process
Monitor, I can see that it fails with a "FILE NOT FOUND" and here is
the output:

20936 2:09:53.0154066 AM w3wp.exe 3324
CreateFile C:\Inetpub\Testdrop\test1.tmp NAME NOT FOUND
Desired Access: Generic Read, Disposition: Open, Options: ,
Attributes: RE, ShareMode: Read, Write, Delete, AllocationSize: n/a,
Impersonating: MYSERVER\IUSR_Dropbox
20946 2:09:53.0156524 AM w3wp.exe 3324
CreateFile C:\Inetpub\Testdrop\test1.tmp NAME NOT FOUND
Desired Access: Read Data/List Directory, Synchronize, Disposition:
Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete
If Oplocked, Attributes: n/a, ShareMode: Read, AllocationSize: n/a,
Impersonating: MYSERVER\IUSR_Dropbox

Since IUSR_Dropbox is a member of Users which have full control to the
directory, why does CreateFile fail and how can I fix this?

Thanks!


Posted by Roger Abell [MVP] on March 10, 2007, 1:55 am
Please log in for more thread options
If you were to repost over to the newsgroup
microsoft.public.inetserver.iis.security
David Wang probably has your diag on the tip of his tongue,
if not already in one of his blog entries.
I find it curious that by what you have shown it is not even
requesting write access, but only Generic Read.

>I am troubleshooting what may be a permissions issue but I don't
> understand what the right lever is to fix it. I set up a virtual
> directory in IIS 6 with read/write privileges and anonymous access
> using an account I created called IUSR_Dropbox. Using the MS utility
> bigpost.exe, I can overwrite existing files but when creating a new
> file, it fails with a "404.0 2" error in the IIS log. Using Process
> Monitor, I can see that it fails with a "FILE NOT FOUND" and here is
> the output:
>
> 20936 2:09:53.0154066 AM w3wp.exe 3324
> CreateFile C:\Inetpub\Testdrop\test1.tmp NAME NOT FOUND
> Desired Access: Generic Read, Disposition: Open, Options: ,
> Attributes: RE, ShareMode: Read, Write, Delete, AllocationSize: n/a,
> Impersonating: MYSERVER\IUSR_Dropbox
> 20946 2:09:53.0156524 AM w3wp.exe 3324
> CreateFile C:\Inetpub\Testdrop\test1.tmp NAME NOT FOUND
> Desired Access: Read Data/List Directory, Synchronize, Disposition:
> Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete
> If Oplocked, Attributes: n/a, ShareMode: Read, AllocationSize: n/a,
> Impersonating: MYSERVER\IUSR_Dropbox
>
> Since IUSR_Dropbox is a member of Users which have full control to the
> directory, why does CreateFile fail and how can I fix this?
>
> Thanks!
>



Posted by Jim on March 10, 2007, 2:55 pm
Please log in for more thread options
> If you were to repost over to the newsgroup
> microsoft.public.inetserver.iis.security
> David Wang probably has your diag on the tip of his tongue,
> if not already in one of his blog entries.
> I find it curious that by what you have shown it is not even
> requesting write access, but only Generic Read.
>

Thanks, will do!

-Jim


Similar ThreadsPosted
Server 2003 change monitor? November 3, 2005, 10:14 am
Windows 2003 R2 delegated permissions are not available for some users in an OU January 2, 2007, 12:15 pm
Windows 2003 Shared Drive Permissions October 9, 2007, 7:14 am
Windows Server 2003 - Services Permissions Issue August 29, 2005, 1:28 pm
Windows 2003 Problem with Group Policy for Services Startup and Permissions April 27, 2006, 7:27 am
"The process is unable to access the file, because the file is used by another process." October 29, 2005, 5:17 pm
Monitor Access To A Particular Share September 1, 2005, 8:25 am
Monitor File Access February 12, 2007, 12:09 pm
Monitor Access To A Particular Share February 18, 2007, 6:07 pm
Performance Monitor Users Group June 17, 2005, 8:09 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap