Win 2000 service needs to access Win 2003 Web Server data

Win 2000 service needs to access Win 2003 Web Server data

Post by TWlrZSBPd2 » Thu, 29 Jun 2006 02:15:01


Hi,

I have a Windows 2000 Web Service (SurfStatsLive Merge Service) on a Windows
2000 server that needs to be able to access and read log files files on a
Windows 2003 Web Server.

Even though I run the service as an administrator, that when logged on can
map a drive and do anything from the Win 2000 server on the Windows 2003
server, the service itself, using the same administrator login does not seem
to be able to access the data.

Any ideas?


Thanks, Mike.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by Arkady Fre » Thu, 29 Jun 2006 17:30:42

Maybe ask that additionally on
microsoft.public.windows.server.networking

Arkady

 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by changli » Thu, 29 Jun 2006 19:06:54

Hi, Mike,
Thanks for your post!

This issue should be caused by lack of permission of the account
IUSR_[machinename], which is anonymous access
to IIS. The file folder should be assigned read permission to
IUSR_[machinename].

For security consideration, such access is not recommended. I recommend you
develop another webservice for reading local files on the windows 2003
Server. The webservice exposes an interface to other applications. Also,
you can add custom validations for that.

If you have any other concerns, please feel free to let me know. It's my
pleasure to be of assistance.
+++++++++++++++++++++++++++
Charles Wang
Microsoft Online Partner Support
+++++++++++++++++++++++++++

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://www.yqcomputer.com/ %2finternational.aspx.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by TWlrZSBPd2 » Thu, 29 Jun 2006 20:05:02

Charles,

I don't think this would be it as IIS is not involved in this case, the 2
servers are directly networked together and the web service is trying to
access the data across the network.

The serice runs under an administrators account that I have used to map a
drive on the Windows 2000 server from the Windows 2003 Web Server.

Any other ideas?
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by changli » Thu, 29 Jun 2006 21:59:32

Hi, Mike,
As my experiences, if you move the code from the webservice to an windows
application, you will find your code works perfectly.
Because the request is sent from the windows application, the
authentication mode is based on windows ACL and the account is local login
account.
However, when a request for network access is sent from an web application,
the login account is the user who accesses the IIS. If the web application
authentication mode is not configured as ACL, IIS will think all the
requests are anonymous account IIS_[machine name].
In fact, the web request via two steps, the first is the user who calls the
web application; the second is the web application requests for network
access via IIS. So after two steps, the original request account has been
changed by IIS.

If you have any other concerns, please feel free to let me know. I'm
pleasure to be of assistance.
+++++++++++++++++++++++++++
Charles Wang
Microsoft Online Partner Support
+++++++++++++++++++++++++++

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://www.yqcomputer.com/ %2finternational.aspx.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by TWlrZSBPd2 » Sat, 01 Jul 2006 19:26:01

Sorry Charles, the confusion is all my fault!

I go the term I used in the initial body of the post wrong (the title was
right)!

I said "Windows 2000 Web Service", but in fact it is just a Service, not Web
Service that simply runs in the background getting data from the IIS logfiles
and putting them into a database. It has nothing to do with IIS, apart from
the fact it accesses the text log files that IIS produces. Therefore it is
simply running under the admin account that I set it up to run under.

Any ideas now that it is clearer?


Cheers, Mike.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by changli » Sat, 01 Jul 2006 20:40:49

Hi, Mike,
Thanks for your response.
Since the service is a windows service, I think this is not a programming
issue; the problem should be caused by windows network permission.

I did a simple test and it succeeded.
My test conditions are:
Two computers locate in the same domain;
One domain account "usr_test" can login either of the computers;
The domain account "usr_test" has the permission of reading a log files
directory.

However, for your application, I think if both of the two computers has one
same account, same user name and same password, the windows service can
access the folder.
If your computers are not in a domain, but within the same workgroup,
you may set the same Administrator account password on both of the
computers and then make a try.
Considering the cache problem, you'd better disconnect the mapping disk and
recreate it again.
It's also better to restart the service.

If that works, I recommend you create a special account on the two
computers.
Assign the account as a login account which owns administrators permission
on the computer that run the service;
Assign the account read permission to the IIS logs folder on the other
computer;
Restart the computer that runs the service and login with the new account;
Map the network drive;
Run the service.

I hope above can make the service work. Good luck!
+++++++++++++++++++++++++++
Charles Wang
Microsoft Online Partner Support
+++++++++++++++++++++++++++

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://www.yqcomputer.com/ %2finternational.aspx.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by TWlrZSBPd2 » Fri, 07 Jul 2006 23:50:01

Charles,

Thanks for your reply.

Sorry for the delay in replying!

I have tried some of what you suggested with no luck yet, but will go
through it all with a fine tooth comb and let you know th result.


Cheers, Mike.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by changli » Sat, 08 Jul 2006 15:47:04

Hi, Mike,
Thanks for your response.

I'll pay attention on this issue and wait for your result.

If you have any other concerns, please don't hesitate to let me know.
I'm glad for your assistance.

+++++++++++++++++++++++++++
Charles Wang
Microsoft Online Partner Support
+++++++++++++++++++++++++++

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by changli » Thu, 13 Jul 2006 19:26:56

Hi Mike,

I am interested in this issue. Would you mind letting me know the result of
the suggestions?
If you need further assistance, feel free to let me know. I will be more
than happy to be of assistance.

Have a great day!

+++++++++++++++++++++++++++
Charles Wang
Microsoft Online Partner Support
+++++++++++++++++++++++++++

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://www.yqcomputer.com/ %2finternational.aspx.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
 
 
 

Win 2000 service needs to access Win 2003 Web Server data

Post by changli » Thu, 03 Aug 2006 19:50:29


Hi,

We have not heard from you regarding this issue. Please post back here at
your convenience if we can assist further.

Enjoy your day!

Charles Wang
Microsoft Online Community Support