in reply to IIS and child process permissions

When IIS is configured to allow 'Anonymous' access, it is actually configured to use the IUSR_Server account for access to local and network resources. This Node has some useful information on reconfiguring the user account that IIS uses for 'Anonymous' browsers. It would be worth changing the account to one that has enough network access to see if your child process was run under the same account and could also access network resources.

This would then mean that you have solved your problem by re-configuring IIS rather than coding anything that would be Win32 specific.

Inman

Replies are listed 'Best First'.
Re: Re: IIS and Perl CGI problem
by qadwjoh (Scribe) on Oct 21, 2003 at 08:57 UTC
    How do I determine if the account I've given has enough network access to see if the child process was run under the same account?

    A
[reply]
      The only real way to make sure is to test it and see if it works! IIS should launch any application under the same user account as the script is running.

      The default IUSR_Server account has very little access to much at all. Choosing another user account will allow you to set the level of access to a network resource using the ACL on that resource. (Look on the security tab of the windows share properties page for the share that you are trying to access.). The easiest way to test this is to try and connect to the network drive using the 'connect as a different user' option. This will allow you to see whether you can make the connection.

      inman

[reply]
        OK, this is what I've done...I've set up the first script to run under a user account. I've mapped the share to a remote machine using this account and was able to access it ok. I've added some code to the first script to test if it can access the share, and it can. But I still can't figure out why the second script isn't allowed to...

        A
[reply]

In Section Seekers of Perl Wisdom