Custom Application Pool user?

Last post 10-17-2008 10:39 PM by richdenis. 7 replies.
Page 1 of 1 (8 items)
  • Custom Application Pool user?

    05-24-2008 12:33 AM

    I'm trying to run my graffiti instance on Windows Server 2008 Web edition and IIS 7 with a custom application pool user.  If I change my application pool to Network Service, it works fine. I tried to add my custom application pool user to the IIS_IUSRS group.  The error I get appears to be a trust issue. My server is running full trust.  I don't see anything in process monitor for the registry, file permissions.  Nothing shows up in the security event log.

    Steve Schofield
    Microsoft MVP - IIS

  • Re: Custom Application Pool user?

    05-24-2008 10:01 PM
    Here is the error I get.

    Server Error in '/' Application.

    Security Exception

    Description: The application attempted to perform an operation not allowed by the security policy.  To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.

    Exception Details: System.Security.SecurityException: Request for the permission of type 'System.Web.AspNetHostingPermission, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

    Source Error:

    The source code that generated this unhandled exception can only be shown when compiled in debug mode. To enable this, please follow one of the below steps, then request the URL:

    1. Add a "Debug=true" directive at the top of the file that generated the error. Example:

      <%@ Page Language="C#" Debug="true" %>

    or:

    2) Add the following section to the configuration file of your application:

    <configuration>
       <system.web>
           <compilation debug="true"/>
       </system.web>
    </configuration>

    Note that this second technique will cause all files within a given application to be compiled in debug mode. The first technique will cause only that particular file to be compiled in debug mode.

    Important: Running applications in debug mode does incur a memory/performance overhead. You should make sure that an application has debugging disabled before deploying into production scenario.

    Stack Trace:

    [SecurityException: Request for the permission of type 'System.Web.AspNetHostingPermission, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.]
       Telligent.Registration.Licensing.ᐁ() +0
       Telligent.Registration.Licensing.ᐁ() +33
       Telligent.Registration.Licensing.SetForPrivateLicensing() +83
       ASP.global_asax.Application_Start(Object sender, EventArgs e) +105
    


    Version Information: Microsoft .NET Framework Version:2.0.50727.1434; ASP.NET Version:2.0.50727.1434

  • Re: Custom Application Pool user?

    07-30-2008 11:37 AM

    Steve, are you running on a custom trust level?

  • Re: Custom Application Pool user?

    07-30-2008 12:05 PM

    I'm running in full trust.

  • Re: Custom Application Pool user?

    08-13-2008 6:06 PM

    I am having the same problem as Steve. Any solution?

  • Re: Custom Application Pool user?

    08-20-2008 8:52 AM

    The account you are using to run the application pool has to be in the IIS_WPG group on the server.

  • Re: Custom Application Pool user?

    08-20-2008 12:10 PM

    FYI - iis_wpg is not a valid group on a IIS 7 box.  This has been replaced by IIS_IUSRS, which the OS and IIS handle automatically.  btw I tried adding my custom user to the IIS_IUSRS group with no luck.

     

  • Re: Custom Application Pool user?

    10-17-2008 10:39 PM

    Any answer on this?  Please help.  I am racking my brain.  I can change the apppool account to NETWORK SERVICE and everything works. 

     

    HELP ME OBI-WON

Page 1 of 1 (8 items)