IIS应用程序将Access拒绝到具有适当权限的UNC文件夹 [英] IIS application gets Access denied to UNC folder that has proper permissions

问题描述

我们的客户在我无法访问的其他计算机上为我们提供了2台虚拟机和一个共享文件夹。我想从虚拟机上运行的IIS 7应用程序访问共享文件夹。



当我登录虚拟机时，我使用用户XXX \ aaa。



Web应用程序在自己的应用程序池中运行，并且该应用程序池已获得标识XXX \aaa。我可以修改共享文件夹的权限，并添加XXX\aaa作为完全控制共享文件夹。



IIS应用程序获取访问权限path \\sharded\folder被拒绝。



从任一虚拟机，我都可以将文件夹和文件添加到共享驱动器。我也可以使用控制台应用程序执行此操作。



但是，如果我在其中一个虚拟机上创建共享文件夹并指向另一个虚拟机使用第一个，我很成功 - 即使XXX \ aaa没有添加到安全性中。仅供参考：但是，管理员处于安全状态，但共享文件夹中没有管理员。我认为XXX\aaa是管理员组的一部分，这就是它成功的原因。我无法将管理员添加到共享文件夹，但我认为添加XXX \ aaa就足够了。



我希望能够回到客户并解释需要做什么，但我没有线索！

A customer of ours has given us 2 virtual machines and a shared folder on a different machine that I don't have access to. I want to access the shared folder from an IIS 7 application that runs on the virtual machines.

When I log onto the virtual machines I use the user "XXX\aaa".

The web application runs in its own App Pool and that App Pool has been given the Identity "XXX\aaa". I can modify the permissions on the shared folder and have added "XXX\aaa" as having full control of the shared folder.

The IIS application gets "Access to path \\sharded\folder is denied".

From either of the virtual machines, I can added folders and files to the shared drive. I can also do this with an console application.

However, if I create a shared folder on one of the virtual machines and point the other virtual machine to use the first, I am successful - even though "XXX\aaa" has not been added to the security. FYI: however, Administrators is in the security, but "Administrators" is not available on the shared folder. I presume "XXX\aaa" is part of the "Administrators" group and that is why it succeeds. I can't add "Administrators" to the shared folder, but I would assume that adding "XXX\aaa" would suffice.

I want to be able to go back to the customer and explain what needs to be done, but I don't have a clue!

推荐答案

您的IIS用户没有权限。错误意味着它所说的内容。

Your IIS user does not have permission. The error means what it says.

在确定运行应用程序的帐户并为共享文件夹设置正确的安全性时，IIS可能会有点混乱。一旦你知道应用程序在哪个帐户下运行（那就是试图访问你的共享文件夹的帐户），这很简单。



我工作的地方，我们有一些需要访问共享文件夹上的文件的Web应用程序。使用IIS 7，默认情况下我认为应用程序将在< machine name => \ iis_iusrs帐户下运行。我们的共享文件夹设置为授予该帐户读/写权限。 （您需要设置共享权限以及NTFS权限。因此，在查看文件夹属性时，有一个共享选项卡。在那里设置权限。还有一个安全选项卡。还在那里设置权限。祝你好运！

IIS can be a bit confusing when it comes to figuring out what accounts your application is running under and setting up the correct security for shared folders. Once you know what account the app is running under (and that is the account trying to access your shared folder) it is pretty simple.

Where I work, we have a few web apps that need to access files on a shared folder also. Using IIS 7, by default i believe the apps will run under <machine name="">\iis_iusrs account. Our shared folders are setup to give that account permission to read/write. (you will need to set the share permissions and also the NTFS permissions. So, when looking at the folders properties, there is a sharing tab. Set the permissions there. There is also a security tab. Also set the permissions there.

Good luck!

嗯，我没有真正解决它。我们的客户给了我一个新用户使用，一旦我将App Pool标识设置为新用户，我能够访问共享文件夹。最终，它与远程系统的安全性有关。但这对我来说太混乱了！

Well, I didn't really solve it. Our customer gave me a new user to use and once I set the App Pool identification to the new user, I was able to access the shared folder. So ultimately, it had something to do with the security on the remote system. But its all too confusing to me!

这篇关于IIS应用程序将Access拒绝到具有适当权限的UNC文件夹的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！