I'm facing an issue currently where Crystal Reports are only working with "Local Service" or "Network Service" identities in Application Pool. If I switch to a "Custom Account" or ApplicationPoolIdentity, reports won't work and I'm getting "No printers are installed" exception. The same thing works perfectly when I switch the application pool identity to NetworkService or LocalService.
I need to use a custom account for each of my site on the server somehow. Can you please help me resolve this issue?
I created a custom account and added it in following user groups (lusrmgr.msc)
Administrator
Network Configuration Operators
IIS_USRS
The only thing I was missing was, I forgot to login using this newly created account before assigning it to the application pool identity (custom account). Once I logged in, it was working fine and I didn't receive 'No Printers are installed' error anymore.
BTW, The reason I did all this was to resolve a desktop heap memory issue which was probably a reason of using 'Network Service' account to all my IIS websites which are around 20 on our server. There was a suggestion to use individual accounts for each of my website and crystal was stopping that.
Related
I have a COM application instantiated by a local Windows service with which I would like to gain access to a network share. To achieve this, I simply attempted to configure my COM server to run as a domain user with access to that share: I go to the 'dcomcnfg' console, locate my server under Console Root\Component Services\DCOM Config, right-click to 'Properties', go to the 'Identity' tab and specify the domain user for the "This user" option. When I do this on my own company network, it works beautifully. However, when a user tries it on their network, they get:
"Catalog Error
An error occurred while processing the last operation on the remote computer 'DOMAIN'.
Error code 80070569 - Logon failure: the user has not been granted the requested logon type at this computer."
where 'DOMAIN' is the name of the customer's domain. I'm presuming then that this is a problem with their domain policies, but network administration is not my area of expertise. Anybody have some idea what the problem might be so I can have a clue when I talk to their IT? Also, if anybody has an alternative approach, I'm open to suggestions. Thanks.
Usually, I give access rights to folder based on the app pool identity, in the format of:
IIS AppPool\[app_pool_name]
On this particular new server, when I try to edit the security settings of a folder, and add that particular user entry, I am getting a
"object IIS AppPool\XXXXXX cannot be found"
Any idea why is this? I verified that the application pool is set to ApplicationPoolIdentity.
I am using IIS 7.5 and Windows Server 2008 R2.
By default whenever you try to add a new account on a machine that joined a domain the accounts are only searched on the domain controller for your domain.
This said, if you want to add the IIS AppPool account, you need to click on "Locations..." and scroll up to the top where you'll find the name of your local machine.
Choose this as your location and you'll be able to add your AppPool account.
I'm trying to run a simple ASP.NET application with basic authentication on an IIS server. Interestingly, the authentication works fine on almost all servers except my production server. When I deploy the application on that machine, it keeps prompting me over and over for the credentials. Unfortunately, it is a lab machine that I don't have access to and I'm not able to view the logs either.
It's an IIS 7.5 server running on a Windows 2008 VM server I guess, and the content folder (where the default app is pointing to) is on shared with us (we have write access to that folder and that's how we are deploying our applications).
Outside authentication settings on the server, what other things could be causing the issue? Please advise.
Most probably this is a access permission to resources used by the web application.
The reason you see this repeatedly login prompt is that the account doesn't have the needed permissions.
First you have to determine if you are using impersonation or not.
If you do impersonate, the authenticated accounts need the necessary permissions.
If you don't impersonate, the application pool account needs the necessary permissions.
So what's the needed permissions?
Well, that could be a lot of things, and we don't know the details of your application.
Do you connect to a database?
Then you have to make sure that current account context has the right permissions to connect to the DB.
Do you read images/files from disk?
Then you have to make sure that current account context has the right permissions to access those resources.
If it is file resources that you are accessing, I would recommend you to use Fiddler and determine which path(s) you'll need to address. It will tell you by those 404 errors.
EDIT: Make sure that your app pool account has the needed permissions for this DLL you mention. Where does it fetch this list from? Is it static in the DLL? Where's this DLL located?
Please also check the event logs on the server for any related errors at the time you try to logon.
I've been happily using Team Foundation Server with Visual Studio 2010 for the last couple of months at my current place of work when it has suddenly stopped working. I get the following errors:
If I browse to the wiki (Sharepoint) on the TFS server it works fine in Firefox but in Internet Explorer it fails with:
No authority could be contacted for authentication.
I'm not aware of any changes to the server or my machine that would cause the errors and other users of TFS are not affected.
The TFS server is on a different domain to my machine, but usually I get prompted to login and using a domain prefixed username works. At the moment, I don't even get a login prompt anymore.
How do I fix this?
I have recently started to experience a similar issue. We also host TFS on a different domain. Twice in the last week TFS has stopped authenticating users, and I have received messages similar to above. I have no idea what is causing this, but on each occasion SQL Server Agent service was stopped. A reboot of the server and a manual restart of SQL Server agent seems to fix the problem temporarily. I'm not sure if this information is helpful, but I would also really appreciate any help in getting to the bottom of this.
We used a workaround to get past this problem. We configured an entry in the Windows Stored User Names and Passwords tool for the domain of the TFS server. It got around the problem of TFS not prompting for credentials by explicitly supplying them via this tool.
When you change your password for that domain account, you must also change the password here otherwise your account can be locked after failing authentication too many times.
I had the same problem, sorted it by upgrading to tfs2012
In my case, I changed the default port 8080 to port 80 and everything worked fine. but the message could also happen due to wrong saved credentials. you can go to the control panel of the windows and search for credentials manager and then remove your TFS credentials.
I created a webapplication using Visual Studio2010 MVC3 .I am able to run this application successfully on my computer emulator.Then I deployed this to azure and is not working.I cant see any errors .The only message I can see on screen is "Internet Explorer cannot display the webpage " .Any suggestions?
By default, the MVC3 template sets up session state management via SQL Express (you can verify this by looking at web.config). This works great locally but not in Windows Azure, since SQL Express won't be running there. Just change your database connection to point to SQL Azure (or disable session state) and hopefully you'll be back up and running again.
Nate Totten wrote a bit more on this topic, here.
I think it's some connection problem, not your code problem since you got the "internet explorer cannot display the website".
I would suggest you RDC to your VM and open the IIS and browse your website, to check if the deployment is correct. And then you can try to go to your website from you machine by the VIP instead of its domain name. For example http://XXX.XXX.XXX.XXX/ instead of http://yourwebsite.cloudapp.net/. If it works then I think you'd better recreate the hosted service and have another try.
HTH