IIS AppPool 用户权限不起作用 [英] IIS AppPool user permissions not working

问题描述

我正在 Win2012 R2 上将 PHP 应用程序从 IIS7 移动到 IIS8.5.该应用程序在其自己的应用程序池 (MyPortal) 中运行，并且需要对子文件夹的写入权限才能创建 PDF.因此，我为本地计算机上的 IIS AppPool\MyPortal 分配了修改或完全控制权限，但是该应用程序仍然无法写入该文件夹.我发现允许它这样做的唯一方法是授予对本地 USERS 组的 Modify 访问权限，我不想这样做(尽管我别无选择 ATM).

I'm moving a PHP app from IIS7 to IIS8.5 on Win2012 R2. The app runs in its own application pool (MyPortal) and needs write permission on a sub-folder to create PDFs. So I assign Modify or Full Control permissions to IIS AppPool\MyPortal on the local machine, however the app is still unable to write to the folder. The only way I have found to allow it to do so is by giving Modify access to the local USERS group, which I'd rather not do (although I have no choice ATM).

php-cgi.exe 进程在 MyPortal 身份下运行，但不知何故没有获取我分配给 MyPortal 用户的文件夹权限.PHP 进程正在执行一个简单的 fopen 命令 $file = fopen($tmp_filename,"w");.

The php-cgi.exe process is running under the MyPortal identity, but somehow isn't picking up the permissions I have assigned to the MyPortal user on the folder. The PHP process is doing a simple fopen command $file = fopen($tmp_filename,"w");.

我看到了这个类似的帖子 https://serverfault.com/questions/570033/iis-iusrs-and-defaultapppool-permissions-do-not-work 这表明这可能是权限缓存问题，通过重新启动解决，但在这种情况下不起作用.

I saw this similar post https://serverfault.com/questions/570033/iis-iusrs-and-defaultapppool-permissions-do-not-work which suggested it may be a permissions caching issue, solved by a reboot, but that's not worked in this instance.

有什么问题建议吗?

推荐答案

你已经知道了@Jan Reinlink.匿名身份验证需要设置为应用程序身份池".我曾假设，因为 PHP 进程作为 MyPortal 运行，所以它使用相同的权限.

You've got it @Jan Reinlink. Anonymous Authentication needed setting to 'Application identity pool'. I had assumed that because the PHP process was running as MyPortal it was using the same permissions.

这篇关于IIS AppPool 用户权限不起作用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！