Access Denied

Okay I'm stumped! I have two WS2003 systems - one has AD
and IIS 6 running on it and the other is a member server
with IIS 5. The one with AD and IIS 6 will not run any
asp.net applications (get this wonderful error message:
Access denied to 'H:\MHT-SCHOOL\'. Failed to start
monitoring file changes. -- ). The KB articles will
rapidly turn the server into a vegtable (and before any
cute remarks are made, I've been at this a long time and
turning servers into vegtables is not my trademark).
There is no ASPNET userid as all the KBs seem to inidicate!

Now here's the really interesting part - on the member
server (the same, just not running AD) it works with no
changes!
Ideas welcomed.
Ron Mitchell
ron.DeleteThis@bcdcon.com

Hi Ron,

Thanks for posting in the community!

From my understanding to this issue, Asp.net web applications in your
windows 2003 DC box failed to run and you found the aspnet account
disappeared in the DC.

The Aspnet account in Windows 2003 is used to run Microsoft ASP.NET worker
process in IIS 5.0 isolation mode. In .net 1.0, the aspnet account will
also be used to run the asp.net web application. In Windows 2003, the .net
version is 1.1 and IIS6 will use the IIS6 worker process isolation mode by
default. At this time, the Network_service account will be used to run the
asp.net web application in the none-DC box. In windows 2003 DC box, Asp.net
web application will run under the IWAM_computername account.

Based on my experience, I'd suggest there are tow methods for you to run
the web application in Windows 2003 DC:
1) You can run the aspnet_regiis.exe which is located in:
%systemroot%\microsoft.net\Framework\v1.1.4322\
You can run this tool with the command:
aspnet_regiis.exe -i
This tool will install ASP.NET 1.1 once again and update scriptmaps at the
IIS metabase root and for all scriptmaps below the root. After that, if
this issue remains, please check the directory(ies) of your asp.net web
application will visit to see whether IWAM_computername account has been
granted the permission to access. You can run filemon to check whether you
have got "access denied" message to any folder for the w3wp.exe process.
The filemon is available from the link:
http://www.sysinternals.com/ntw2k/source/filemon.shtml

If not, please add the IWAM_computername account into the security property
of the folder(s). The kb article will introduce the default Permissions and
User Rights for IIS 6.0.
812614 INFO: Default Permissions and User Rights for IIS 6.0
http://support.microsoft.com/?id=812614

2) You can configure the application pool identity of asp.net web
application to one administrator account to troubleshoot this issue.
Identity Application Pool Settings
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/htm
l/cpconidentityapplicationpoolsettings.asp
If asp.net works and your scenario permits this high privilege account, you
can create one administrator account for asp.net web application.

Please feel free to let me know if you have any further questions. I am
standing by to be of assistance.

Does this answer your question? Thank you for using Microsoft NewsGroup!

Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.