IIS7文件夹权限的web应用程序

时间:2021-05-29 18:14:22

I am using windows authentication without impersonation on my company's intranet website with IIS7.

我在公司的内部网网站上使用的是windows身份验证,没有模仿IIS7。

Under IIS7, what account is used to access the folder which contains my web app using these settings?

在IIS7下,使用这些设置访问包含我的web应用程序的文件夹的帐户是什么?

Would it be IIS_IUSRS? Or NETWORK SERVICE? Or another I don't know about?

是IIS_IUSRS吗?或网络服务吗?或另一个我不知道吗?

5 个解决方案

#1


104  

In IIS 7 (not IIS 7.5), sites access files and folders based on the account set on the application pool for the site. By default, in IIS7, this account is NETWORK SERVICE.

在IIS 7(不是IIS 7.5),网站访问文件和文件夹根据账户设置站点的应用程序池。默认情况下,在IIS7,这个帐户是网络服务。

Specify an Identity for an Application Pool (IIS 7)

为应用程序池指定标识(IIS 7)

In IIS 7.5 (Windows 2008 R2 and Windows 7), the application pools run under the ApplicationPoolIdentity which is created when the application pool starts. If you want to set ACLS for this account, you need to choose IIS AppPool\ApplicationPoolName instead of NT Authority\Network Service.

在IIS 7.5 (Windows 2008 R2和Windows 7)中,应用程序池运行在应用程序池启动时创建的ApplicationPoolIdentity下。如果您想为这个帐户设置acl,需要选择IIS AppPool\ApplicationPoolName而不是NT Authority\网络服务。

#2


16  

http://forums.iis.net/t/1187650.aspx has the answer. Setting the iis authentication to appliction pool identity will resolve this.

http://forums.iis.net/t/1187650.aspx的答案。将iis身份验证设置为应用程序池标识将解决这个问题。

In IIS Authentication, Anonymous Authentication was set to "Specific User". When I changed it to Application Pool, I can access the site.

在IIS身份验证,匿名身份验证设置为“特定用户”。当我把它改为应用程序池,我可以访问网站。

To set, click on your website in IIS and double-click "Authentication". Right-click on "Anonymous Authentication" and click "Edit..." option. Switch from "Specific User" to "Application pool identity". Now you should be able to set file and folder permissions using the IIS AppPool\{Your App Pool Name}.

要设置,请单击IIS中的网站,双击“身份验证”。右键单击“匿名身份验证”并单击“编辑…”选项。从“特定用户”切换到“应用程序池标识”。现在,您应该能够使用IIS AppPool\{您的应用程序池名称}设置文件和文件夹权限。

#3


15  

Running IIS 7.5, I had luck adding permissions for the local computer user IUSR. The app pool user didn't work.

运行IIS 7.5,我幸运地为本地计算机用户IUSR添加了权限。应用程序池用户没有工作。

#4


5  

If it's any help to anyone, give permission to "IIS_IUSRS" group.

如果任何帮助任何人,给“IIS_IUSRS”组的权限。

Note that if you can't find "IIS_IUSRS", try prepending it with your server's name, like "MySexyServer\IIS_IUSRS".

注意,如果找不到“IIS_IUSRS”,可以尝试使用服务器名进行预挂,比如“MySexyServer\IIS_IUSRS”。

#5


0  

  1. Working on IIS 7.5 and Windows 7 i couldnt give permission APPPOOL/Mypool
  2. 在使用IIS 7.5和Windows 7时,我不能给APPPOOL/Mypool权限
  3. IUSR and IIS_IUSRS permissions not working for me
  4. IUSR和IIS_IUSRS权限不为我工作
  5. I got to problem this way:

    我的问题是这样的:

    -Created console application with C#
    -This appliaction using createeventsource like this

    设计与c#控制台应用程序——appliaction使用createeventsource这样的

    if(!System.Diagnostics.EventLog.SourceExists(sourceName)) System.Diagnostics.EventLog.CreateEventSource(sourceName,logName);

    如果(! System.Diagnostics.EventLog.SourceExists(sourceName)System.Diagnostics.EventLog.CreateEventSource(sourceName logName);

    -Build solution and get .exe file

    -构建解决方案并获取.exe文件

    -Run exe as administator.This create log file.

    国营administator exe。创建日志文件。

NOTE: Dont remember Event viewer must be refresh for see the log.

注意:不要忘记查看日志时必须刷新事件查看器。

I hope this solution helps someone :)

我希望这个解决方案能对某些人有所帮助。

#1


104  

In IIS 7 (not IIS 7.5), sites access files and folders based on the account set on the application pool for the site. By default, in IIS7, this account is NETWORK SERVICE.

在IIS 7(不是IIS 7.5),网站访问文件和文件夹根据账户设置站点的应用程序池。默认情况下,在IIS7,这个帐户是网络服务。

Specify an Identity for an Application Pool (IIS 7)

为应用程序池指定标识(IIS 7)

In IIS 7.5 (Windows 2008 R2 and Windows 7), the application pools run under the ApplicationPoolIdentity which is created when the application pool starts. If you want to set ACLS for this account, you need to choose IIS AppPool\ApplicationPoolName instead of NT Authority\Network Service.

在IIS 7.5 (Windows 2008 R2和Windows 7)中,应用程序池运行在应用程序池启动时创建的ApplicationPoolIdentity下。如果您想为这个帐户设置acl,需要选择IIS AppPool\ApplicationPoolName而不是NT Authority\网络服务。

#2


16  

http://forums.iis.net/t/1187650.aspx has the answer. Setting the iis authentication to appliction pool identity will resolve this.

http://forums.iis.net/t/1187650.aspx的答案。将iis身份验证设置为应用程序池标识将解决这个问题。

In IIS Authentication, Anonymous Authentication was set to "Specific User". When I changed it to Application Pool, I can access the site.

在IIS身份验证,匿名身份验证设置为“特定用户”。当我把它改为应用程序池,我可以访问网站。

To set, click on your website in IIS and double-click "Authentication". Right-click on "Anonymous Authentication" and click "Edit..." option. Switch from "Specific User" to "Application pool identity". Now you should be able to set file and folder permissions using the IIS AppPool\{Your App Pool Name}.

要设置,请单击IIS中的网站,双击“身份验证”。右键单击“匿名身份验证”并单击“编辑…”选项。从“特定用户”切换到“应用程序池标识”。现在,您应该能够使用IIS AppPool\{您的应用程序池名称}设置文件和文件夹权限。

#3


15  

Running IIS 7.5, I had luck adding permissions for the local computer user IUSR. The app pool user didn't work.

运行IIS 7.5,我幸运地为本地计算机用户IUSR添加了权限。应用程序池用户没有工作。

#4


5  

If it's any help to anyone, give permission to "IIS_IUSRS" group.

如果任何帮助任何人,给“IIS_IUSRS”组的权限。

Note that if you can't find "IIS_IUSRS", try prepending it with your server's name, like "MySexyServer\IIS_IUSRS".

注意,如果找不到“IIS_IUSRS”,可以尝试使用服务器名进行预挂,比如“MySexyServer\IIS_IUSRS”。

#5


0  

  1. Working on IIS 7.5 and Windows 7 i couldnt give permission APPPOOL/Mypool
  2. 在使用IIS 7.5和Windows 7时,我不能给APPPOOL/Mypool权限
  3. IUSR and IIS_IUSRS permissions not working for me
  4. IUSR和IIS_IUSRS权限不为我工作
  5. I got to problem this way:

    我的问题是这样的:

    -Created console application with C#
    -This appliaction using createeventsource like this

    设计与c#控制台应用程序——appliaction使用createeventsource这样的

    if(!System.Diagnostics.EventLog.SourceExists(sourceName)) System.Diagnostics.EventLog.CreateEventSource(sourceName,logName);

    如果(! System.Diagnostics.EventLog.SourceExists(sourceName)System.Diagnostics.EventLog.CreateEventSource(sourceName logName);

    -Build solution and get .exe file

    -构建解决方案并获取.exe文件

    -Run exe as administator.This create log file.

    国营administator exe。创建日志文件。

NOTE: Dont remember Event viewer must be refresh for see the log.

注意:不要忘记查看日志时必须刷新事件查看器。

I hope this solution helps someone :)

我希望这个解决方案能对某些人有所帮助。